last executing test programs:

2m41.124670927s ago: executing program 32 (id=351):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x800, 0x7, 0xdf, 0x9b72, 0x7, 0xfff)
open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sched_rr_get_interval$auto(0x0, &(0x7f00000000c0)={0x5, 0x81})
r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xffff, 0x0)
write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)

2m29.25192438s ago: executing program 33 (id=396):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0)
sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x3)
socket(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x8, @old_prog_fd=r2}, 0xa3)
bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0xff, 0xffffff01, 0x9, 0x7f, @count=0xfffffff1, 0x0, 0x80000000, 0xc, 0x0, 0x80007}, 0x9)

2m17.764484063s ago: executing program 34 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x18, &(0x7f0000005340)={&(0x7f0000000000)={0x18, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m2.100908102s ago: executing program 5 (id=481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x20044050)

2m1.707925908s ago: executing program 5 (id=482):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
setsockopt$auto_SO_TIMESTAMPING_OLD(r1, 0x2d, 0x25, &(0x7f0000000040)='%\x00', 0x3)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\a\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

2m0.110672158s ago: executing program 6 (id=487):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x1000, 0x0)
ioctl$auto(0x3, 0x5420, 0x38)
mmap$auto(0xfff, 0xb03, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x7, 0xffffffffffff0001, 0x15)
writev$auto(r1, &(0x7f0000000380)={&(0x7f00000002c0)="81f105116ee0814400bac7e080e42f9ec29da1b2e194b4482ccf61735d53a3b3da7a551e3458ddfda1f16612788577d9aa2a82cd03066859822b5adf1a0ef69770e4fbca8738bbe1e3d7ee90ea5bf5f79bada14f5c3ddb32ffda56fef9adcc13cbb040d98e3decb98892738cbe3dfad712e768fbb767759d3749904f2dffed10a8b498b2a9df5471ac688213ce8f4ad884b063314cea040786d3b86cead2b128d15b9ab6990d5a79e8969c7a8bfbba8eb73205", 0xe}, 0x9)
madvise$auto(0x0, 0x400053, 0x9)
shmdt$auto(0x0)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3)
prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5407, 0x0)

1m59.744872427s ago: executing program 6 (id=489):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2000012, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x1, 0x20020000)
fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1)
read$auto(0x3, 0x0, 0x80)
setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x3)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x142, 0x0, 0xfffffffffffffffd)

1m58.696241905s ago: executing program 5 (id=492):
socket(0x2, 0x3, 0xa)
socket(0xa, 0x3, 0x3a)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4605, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x43, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002)
mmap$auto(0xfffffffffffffff9, 0xdff6, 0x400df, 0x19, r3, 0x2a7d)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
acct$auto(0x0)
syz_clone(0x4b184d11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)

1m58.647097173s ago: executing program 6 (id=493):
syz_clone(0x60500, 0x0, 0x0, 0x0, 0x0, 0x0)

1m58.151977244s ago: executing program 6 (id=494):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000011, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0)

1m57.507136898s ago: executing program 6 (id=496):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0xa, 0xc0, 0x7}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x232440, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="01002fbd7000fddbdf250c00000018000380140003c00c00b78008000100b8cc5f04a4b3ce13ee2255a4468be5f1ef4b59d5da74b05a101a19dc39c7baeaf382990fed9c1fd5622ad43c58f9f94c9e329e4904afca3c1a35f68a87c8d868c0b27345905581f6ff84a00e19e5b31e8d5e6c610d1907c9d6223c88052848e328808ff53cf98a59341a91d76724e2d54ee71a42d92bd4e6b5d6aeaec81e7a2ba2a4bdf210c7af86c297d6aab5c3227b547cb1294207281d30bba78817a204dfaa32674eac7958bf0818036b689e71", @ANYRES32=0x0, @ANYBLOB="0400268018000180140002007465616d5f736c6176655f3100000000"], 0x44}}, 0x48084)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0x100000011, 0xfffffffffffffffa, 0x7)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0)
preadv2$auto(r2, 0x0, 0x8000000000000000, 0x400, 0x1, 0x7)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
pread64$auto(r1, 0x0, 0x34b, 0x10000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x10, 0x2, 0x1)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x82f, 0xffffffffffff0001, 0x2000000000080eb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x100)

1m56.151139616s ago: executing program 5 (id=497):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r1, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0x10000000000000df, 0xeb1, 0x401, 0x8)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)

1m55.429908187s ago: executing program 6 (id=501):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x3e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)

1m55.254180673s ago: executing program 5 (id=502):
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000440)={0x80})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0)
poll$auto(&(0x7f0000000240)={r2, 0x20, 0x2}, 0x6, 0x104)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xe2002, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r4, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff)
read$auto(r3, 0x0, 0x3ff)
close_range$auto(0x2, 0x8, 0x2000)

1m53.892243916s ago: executing program 5 (id=504):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r0)
sendmsg$auto_NFC_CMD_START_POLL(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r6, 0x38, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0x16, 0x2, '/dev/snd/midiC2D0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x40)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)

1m40.337052469s ago: executing program 35 (id=501):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x3e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)

1m38.434779752s ago: executing program 36 (id=504):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r0)
sendmsg$auto_NFC_CMD_START_POLL(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r6, 0x38, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0x16, 0x2, '/dev/snd/midiC2D0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x40)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)

1m27.108840565s ago: executing program 7 (id=559):
r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
mmap$auto(0x9, 0x200006, 0x6, 0x10, r0, 0x25)
mremap$auto(0x0, 0x7, 0x7ff, 0x3, 0x200000)

1m26.484236095s ago: executing program 7 (id=560):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@bpf_attr_4={0x77fa83e5, r0, 0xe65}, 0x5)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54)
socket(0x2, 0x1, 0x106)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
listen$auto(0x3, 0x400000)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4)

1m24.910993813s ago: executing program 7 (id=564):
io_uring_register$auto(0xffffffffffffffff, 0x25, 0x0, 0x80000001) (fail_nth: 1)

1m24.749953148s ago: executing program 3 (id=566):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0xea)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200420ed89176ebd90bbea89f7b3fb468ec2399fe8c8752ae988c7a1d5f68ac086b80e4279e32deea2702c91de6e38182a2878718c599507fe21a5785c5f5c0b3fdadc5e62ff06093808244ce1bae4f188ae0fb8fa9c493b8bc5d3a248d3100"/139, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000008000400ff000000080004000600000008000500000000c0"], 0x27c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='\'', 0x8001, 0x9}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x24000004)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x246541, 0x0)
ioctl$auto(0x3, 0x402c542d, r4)

1m24.310471889s ago: executing program 7 (id=567):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
rt_sigtimedwait$auto(&(0x7f0000000440)={0x7ff}, &(0x7f0000000480)={@_si_pad}, &(0x7f0000000500)={0x2, 0xd9}, 0x8)
ioctl$auto_TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000ec0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000002740)=ANY=[@ANYBLOB="18180000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf251d00000002012801299c7c4805eb7f98390d3f19ed4b5b5394e68c49fab51898725207902e621625c888413a6c2b625b04a0fc74d74467f65630fd2e393064132a303ee49ae7dd7156bee0f45c384fcde8b3cd46e224c3ad2b33c0c84492b092f16509734c7dd85e5d58eccae424889d211d058538832975b453332b32b266c467a6e675a2514c3e9bc8710281e2b336c7779f284efe6a5fa18e78994c8a91c0808961ccafa6bac1bbf27d4e948b23722216d67c198bcffd426226b25e3b3c429c9f605482c857d6b8d74ca6c4e094e9389824467e6cc8ca54620245843af1e9ad9d8207659019fbb971f56563525f2b837bbd0bf5ba6035d4d27c8a3a0ee460f432bc89160d000005002a017f0000000600b100090000000400dd0048037f0042e7fe3dcb1c92d672e62aab5b83540ba0273cbea613ef411729638c7cc8311ebb31cc4fb28a4029d7fcdc715e496e63b4b0ff21ede9401326934053b4a5f66f4a5455a65d26366ed89763027def739d65b755d96d79226ffcde6d326088f7523577293a1aa76a6c37cdebcbdbf9889a41f5cd72c1e5a72994280d17e257f316fb780f6b4c6e3ce142a793b7d69772e5909df3d834b289265b5ca13f54cd2a3ed4e6bbf5efe855087ec1576988ba02bf33197c1050d61090487b25fad1d58a9ffb8fcd627330d76c90b1c0889ec84fee69cfd8fde35044916f1ba320966004a5224e8e3798e6b3c9f78724188592513c07985a2076e79bea30b373172539421dc6bafd53fc1e08eb670b8cca36e3ca60cc9a4ea05beba19d092602c5f43bbd99622d49dd8dd971657a191a6243df20d559c03be1e5e76d8e6baaa4e712125b9362de4c7c6af3d4c0ac5fa17f6da2f151c2df3be1f057dc4e064aea6b93ab5189c32e409713daa485cb017e69a737cd5e498ca8266854d8cf8061fd29b076e0660c97b4ae661e1ef6f77cdcda5dc47bb6c326abd0339001ed74330d9c2b23144a44eef5dfa218d711c47d79a6c48c5054b3893aef20229bbccde5683ddf2a0c4efecee2ed13d1b8c3c60ff2c4231fd4f5ff9c1d45fcc0bb692d103a22554d6e0ab025c2554b78dc67049132799db0ebd3a264b1b4eaf722f00b9327846d085aa913bf70a6c73bc730d3684b985da3a60be81a1cff998159f9d414a80fd29b73e35b860c4305bf3d00c88da1bfd1e9f61ecf3600c667c8e756c66e4bd7ec5aec58bc4f3e8a63a5316c931fb6c4ceb548dcf139cf832fff4de5bce5c3db8297a93439c11d06fe822d4e3531f545efe7b7f2b1ffede7ab031cbcae2e8efb31d955889015db5ab0a97db0cb5cd25b731eda95160bb9a197a731448a38d091805433c60a19cd08f66affd984d8368a8b9ec17a029ac76359c587d4ef31b0d92ebbdf86ccddc354978b8fd389b8b1443668c54d44cc41a4d3bafb4cecd326d41c1635cf6d0e0869b438a1fd10c1c811b9c733fea7a3fdf608d59e38c3a5d08646c7efc0ba5d59a19d3f00a0b262fdaf3f6fc78ec28fd0c07dd7cb0fabf8631d6ee843a19bb57d903070eee9ab959d47d7228addb33383f0944950ad1c6bae381fd58e196c5d6e99a00126800800020007000000b800030071fe8f611f0737dcfe11d30f96ee8dcba138eab4f149b0f9bf4df775ce876179f19f1f377437f6ea80ac811a20fbdd7ac01c6996d5c991d2da52aeaf48cbf7c1421e37e85b7044e46dcfb23c73638823956b68dea42cb73d3371a5f6a646fabe5fd2b805246e43ca36dd2885a84331db3efd4a52d56e9a5711fb19281274042ca86f5a0f3486e261ba17ced1e5f97aa8c2f1b1f3c9c8ad849998ccf9f618df3cfab52516311e5ef334cd1277ec9d829f0fdfe662080001007f000000d1000300861aa0ddda4cbdc65da57de392359b911f9ebc863c42de423db9fb7950ebd91bf9e5b7f294452c3a027689cf6870b1543e4ee54ce80aa8317d1e125891cf0b9d72046ff4d9c4e6a9b360bd37f0392e62ca6ba09480a41cbb29b3ee264dfa32bec99a588294333053fcdacb66392fa0e8c515f6c7d377ca505020c14443a8732f0421a17d2cc6aa6afe86565a66738bcb081235129ab5aba47642e6b823e25124c467073ad5dca5dfb7c34cf9408d20ee371ab332b2eed0d984962bdcde5abaf9816369cc316784aa3eeecfb4d500000001122280db0c009f8008003d00d1cd00001000c5800400dd800400b4800400a78070bdff70b3af63a152a93984213a0ebb49da5a2d880e7dc345b771a7431e973be4dd5466e12fa51f10e48780ca5fb08adcbc54734e169c629037aebeb96d5fd487501a8cf30bbbc2ba9b816e3bc759f5d4aad33fee33236ec44292030e88f00d97436e7560c787cd527466193d3e9860c495252d0434df3408f0d46211ecf948f190c31335431ee016cd7536af11d30d0e0c001f000600000000000000e3d88d9f7ec2051d0c8280a85effb4183232dfc8b97bf059438e3fd9b0ea89442fbe28756a1b305d843af1536162410b679819ee14707efb0d460b434f814b5013ca0b71696b096430821d64d70919083bb52a3dcc3f3171609f7b728b6a5fb245a3e7c3307b15bd00d6808efb2168af4eb767b370a94d687816b3c5515b0683706c20940a7057dec20b597574d15a135a114f33d061df1b0b3abf372144940e55c0164a3d6b71f9558980cccfa26c6efb3fa62b0188579f08009b00", @ANYRES32=r3, @ANYBLOB="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"], 0x1818}, 0x1, 0x0, 0x0, 0x40004}, 0x4080)
read$auto_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0x1bca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd03, &(0x7f00000001c0))
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)

1m24.068417601s ago: executing program 3 (id=569):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x25, 0xa418b9a989e437be, 0xb)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0802, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0x10, 0x2, 0x0)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x400, 0x8000000000, 0x0, 0x0, 0x0)
open(0x0, 0x261c2, 0x84)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000000c0)=@prog_bind_map={r0, 0xffffffffffffffff, 0x2}, 0xd)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0xc504)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x1}, 0x800008}, 0x5, 0x20000000)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x2000c840)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7)

1m23.678749825s ago: executing program 3 (id=570):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/usb/drivers/cdc_mbim/uevent\x00', 0xdf802, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
unshare$auto(0x4)
r1 = eventfd2$auto(0x0, 0xe89)
read$auto_ftrace_set_event_pid_fops_trace_events(r1, &(0x7f0000000440)=""/143, 0x8f)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10801, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0)
ioctl$auto_PPPIOCGIDLE32(r5, 0x8008743f, 0x0)
socket(0x2b, 0x1, 0x0)
r6 = getpgid$auto(0x0)
r7 = getpgid(0x0)
rt_tgsigqueueinfo$auto_SIGCONT(r6, r7, 0x12, &(0x7f00000001c0)={@siginfo_0_0={0xffff, 0x0, 0x7, @_sigsys={&(0x7f0000000040)="7ae9c3c5e0a884177e3e04afe0a2a6034cab1089cbd75175f06c002f7bc903828bb2c71f84913633a69571dfedd5e1deb806b2b4fbc6ccb62021b716bc2c01e12d71a8c87c56882fdf40bb0820e933e7ba18ec8ed7fdfa94f8ebf1e7fe7d86cc50", 0x0, 0xd}}})
listen$auto(0x3, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
io_getevents$auto(0x7, 0x5, 0x2, &(0x7f0000000240)={0x1ff, 0x4, 0x0, 0x9}, &(0x7f0000000280)={0xc8, 0x7fffffffffffffff})
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
ioctl$auto_TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)="2bf77c910cba25ed930ccd7f30f682f6b8451e707bb6a3510cf11a69b58db40efa25da5444dd5eac96d03ac4c6213ce87312398f231be87fb9cc9b7d0f52a5e2d7e7d9bc57bf47d0f0faf8565b052728ff548bffa12263f3d56a656b4c0367a8d73bea49a4561a93bbedaf3e9c60b9b83c409d21ab4d3bb1d08baa8bdae30b")
prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffff9, 0x0)
ioperm$auto(0x5, 0x5, 0x4)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0)
write$auto(r2, &(0x7f0000000740)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k\xb0E\xc3IY\x04[\xc7\xb5w_\x94\x98\xc2=Af.X\xdeZ>eC\x14f\xb9\xc1-h~\x89)4\xdf?4y\xf9\xa7\xaa\a\x00\x00\x00\x00\x00\x00\x00\xae^Iz\b\xf7\xca~\xca{\"lIygF\x98_n\xdd\x0f4\x9d\xcb\x04\xd8\xea\x87\xc2\xc3\x94=\xc3J_\xadY\xe5\\\x91\"\x9f\x06;\xb74R\xbb$\x9bjF\xeb9\xe8uR\xe3Fl\x86\xe4q\x14\xbcs\xff\x8b\xf5\xcca\xcd\xdf\xbc\xbf\x01\xf0\x7fd3R\x92\xc7\xe3\x1c;\xcb\xfdU<\xd7\x16\x9a\xc5o5f\x9b\x1e^\xf3b\xc6V\x9f\x94~\xbcR\xf7\x9e\xa0%\x9e?\x82P\xc7\xbd2\xc3\x92\x19\xf1#\n\x901\xe2\xdf\x97\xfdl\x9b\x87\x88\x9f\xb2\x82?\xf7GD\xb1,\xfcv\xdcctu\xae\x10\xb2\xd1[t@\b\x8a\x12t\xf7\xe2\xd0\xbe\xcd\xbb\xaf\xac\x8dyj\xebtIe9\xf4\x01-)\xf9\xe3>\x84)\xf6\xb7J\xfd\xe8\xbc\x06C\xe9\xdc\xbcm\x87Z\x16\x92\xae\xce\x81\xcf<\xf7\xa6K[\x86k\x13\xa4\xa5\xb4\xf1\x92%)\xab\'\x96\xfb:Lm\xc1\xfbE\xe0|\x01t\x85\xed\x95-', 0x10000)
ioperm$auto(0xffffffffffbfffff, 0x10100000c, 0x3)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)

1m22.378219313s ago: executing program 7 (id=572):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x2003, 0x0)
read$auto_stats_fops_(r3, 0x0, 0x0)
unshare$auto(0x3)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)="f320f820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd03, &(0x7f00000001c0))
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0)

1m21.663252055s ago: executing program 3 (id=573):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x80000008000)
socket(0xa, 0x2, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x25201, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
socket(0xa, 0x5, 0x0)
r0 = open_tree$auto(0xffffffffffffff9c, 0x0, 0x58f2)
write$auto_split_huge_pages_fops_huge_memory(r0, 0x0, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
bpf$auto_BPF_MAP_CREATE(0x0, 0x0, 0x4)
r1 = socket(0xa, 0x5, 0x84)
r2 = getsockopt$auto(r1, 0x84, 0x7b, 0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0)
close_range$auto(r2, 0x8, 0x5)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r3)
msgctl$auto(0x1, 0x8000, &(0x7f0000000140)={{0x5, 0xee00, 0x0, 0xb59a, 0x8, 0x8}, &(0x7f0000000080)=0x4d, &(0x7f00000000c0)=0x7, 0x6, 0x26, 0x6, 0x6, 0xad6, 0x9, 0xb, 0x1, @raw=0xcb2})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x82, 0xd, 0x0, 0x4)
setgroups$auto(0x531c, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_GET(r3, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5e63d4f173a6d562}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x418}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff)
ioctl$auto_KVM_CREATE_VM(r4, 0x8188aea6, 0x0)

1m20.329672885s ago: executing program 7 (id=577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x18, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (fail_nth: 5)

1m19.013104174s ago: executing program 3 (id=581):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4)
setsockopt$auto(0x3, 0x6, 0x46, 0x0, 0xa07)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shmdt$auto(0x0)
socket(0x7, 0x800, 0x2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
kexec_load$auto(0x400, 0x7fd, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="85d4d570612d4cd4b38ae82e4368e1e53d4d35835d629af1c3d95dcf3ba6976fae6284f2c7bc281f42d36174a41a4a3ab4836149c1e7ed66d2764c58bb1f9c43", 0x0, 0x7fff, 0xfffffffffffffff7}, 0x0)
lseek$auto(r2, 0x9, 0x0)
getdents$auto(r2, 0x0, 0x62d4)
r3 = socket(0x2, 0x5, 0x0)
getsockopt$auto(r3, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10008)
socket(0x1d, 0x4, 0x3)
ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x25, 0x0, 0x80000001)
kexec_load$auto(0x401, 0x836a, &(0x7f0000001240)={@buf=&(0x7f0000000240)="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", 0x5, 0x6, 0xf3b}, 0x40)

1m14.25681722s ago: executing program 3 (id=593):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r2, 0x1269, 0x0)
ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0)
r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
mmap$auto(0x8, 0x402000b, 0x4af, 0xeb3, 0x401, 0x8001)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x1000000, 0x3}, 0xc)
ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0xc0dc, 0x6, 0x4})
read$auto(0x3, 0x0, 0xfffffdef)
syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
getsockopt$auto_SO_SNDBUF(r3, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r5, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x565)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1)
mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3)
ioctl$auto(0x3, 0x402c542b, 0x38)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)

1m6.27064585s ago: executing program 4 (id=615):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2000012, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x1, 0x20020000)
fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1)
read$auto(0x3, 0x0, 0x80)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x5b4)
setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x3)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

1m4.970785826s ago: executing program 37 (id=577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x18, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (fail_nth: 5)

1m4.94499535s ago: executing program 4 (id=618):
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
write$auto(0x3, 0x0, 0xffd8)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0x81)
write$auto(0x3, 0x0, 0x100082)

1m3.95194806s ago: executing program 4 (id=619):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
setsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x2d, 0x25, &(0x7f0000000040)='%\x00', 0x3)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\xf4\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

1m1.516642089s ago: executing program 4 (id=623):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x1ff, 0x4, 0x3, 0x1c) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x1cf, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8008c48, 0x29b, 0x4, 0x4c3dd626, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64)
r2 = socket(0x2, 0x801, 0x84) (async, rerun: 64)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x23, @multicast1}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
r3 = getsockopt$auto(r2, 0x84, 0x7b, 0x0, &(0x7f00000002c0)=0x1000c0)
read$auto_lockdown_ops_lockdown(r3, &(0x7f0000000300)=""/4096, 0x1000) (async)
clone$auto(0x8, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x802, 0x1) (async)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r1, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x24048810) (rerun: 32)

1m0.910042431s ago: executing program 4 (id=626):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(r0, 0x0, 0x2, 0x9, 0x0)
keyctl$auto_KEY_REQKEY_DEFL_REQUESTOR_KEYRING(0x3, 0x7, 0x0, 0xee00, 0x5e)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0x8, 0xd, 0x6, @_rt={r1, 0x0, @sival_ptr=0x0}}})
r2 = socket(0x11, 0x3, 0x9)
pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83)
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100)
openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim7/fib/nexthop_bucket_activity\x00', 0x10000, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x200000000009, 0x0)
landlock_add_rule$auto(r3, 0x1, 0x0, 0x0)
fspick$auto(0xffffffffffffffff, 0x0, 0x9)

59.792871828s ago: executing program 4 (id=628):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0)

58.955939029s ago: executing program 38 (id=593):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r2, 0x1269, 0x0)
ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0)
r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
mmap$auto(0x8, 0x402000b, 0x4af, 0xeb3, 0x401, 0x8001)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x1000000, 0x3}, 0xc)
ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0xc0dc, 0x6, 0x4})
read$auto(0x3, 0x0, 0xfffffdef)
syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
getsockopt$auto_SO_SNDBUF(r3, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r5, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x565)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1)
mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3)
ioctl$auto(0x3, 0x402c542b, 0x38)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)

51.669661617s ago: executing program 8 (id=634):
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, [{0x200, 0x7}, {0x9, 0x0, 0x8}]})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0)
poll$auto(&(0x7f0000000180)={r2, 0x20, 0x5}, 0x9, 0xfc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xe2002, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r5, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff)
read$auto(r4, 0x0, 0x3ff)
read$auto(r3, &(0x7f0000000040)='\\[', 0x7e)
close_range$auto(0x2, 0x8, 0x0)

49.349168128s ago: executing program 8 (id=636):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'caif0\x00'})
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent1/current_device\x00', 0x20000, 0x0)
r1 = ioctl$auto_TUNSETLINK(r0, 0x400454cd, &(0x7f0000000040)=0x7f)
prctl$auto_SECCOMP_MODE_STRICT(0x5, 0x1, 0xffffffffffffffff, 0x1, 0x2)
read$auto(r1, 0x0, 0x21)
setresgid$auto(0x0, 0x800000a0, 0x0)
setresuid$auto(0x2, 0xffffffffffffffff, 0x200)
keyctl$auto(0x2, 0x0, 0x0, 0xee00, 0x3)
keyctl$auto(0xb, 0xfffffffd, 0x7, 0x0, 0x6)
setresgid$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x2)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48)
clock_settime$auto(0x14, &(0x7f0000000000)={0x9, 0x20000000000004})
fchmod$auto(r2, 0x6439)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x1)
io_uring_setup$auto(0x6, 0x0)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0)

49.001859492s ago: executing program 8 (id=637):
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
socket(0x29, 0x2, 0x0) (async)
socket(0x29, 0x2, 0x0)
socket(0x9, 0x80000, 0x0) (async)
socket(0x9, 0x80000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0000e100"}, 0x58) (async)
connect$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0)
r2 = socket(0x2a, 0x800, 0xfffffffe)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x22200, 0x51)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x258880, 0x0)
close_range$auto(r1, r2, 0x104)
mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
socket(0x1a, 0x80000, 0xf) (async)
r4 = socket(0x1a, 0x80000, 0xf)
setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c0200006b846b00fd5c75a59ac8ccb3c6ad74f9e309af8ae58e28233cc853d862afda739d0757af48db003f31c42acbf7e0a0b889eaba0306f7d9b475ff325d9b580ad40153a7851d9e3c2a9a85d007cab0d47bdfb66beccfb55b99a771038e1afc4ecc", @ANYRES16=0x0, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000048)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000200)=""/53, 0x35)
execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00')
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
rename$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00') (async)
rename$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00')

47.898180645s ago: executing program 8 (id=639):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x24040071}, 0x800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x60020000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0x6, 0xbd, 0x0, 0x4}, &(0x7f00000001c0)=0xf7, &(0x7f0000000200), 0x1, 0x1000000000000, 0x9, 0x8, 0x5, 0x6bee, 0xd, 0x2, @inferred, @inferred=0xffffffffffffffff})
r5 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setfsuid$auto(0xee01)
mmap$auto(0x8, 0x61, 0x10001, 0x1ff, r4, 0xc)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

46.833009238s ago: executing program 8 (id=641):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0)
mbind$auto(0x0, 0x2091d2, 0x1, 0x0, 0x6, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
bpf$auto(0xd, &(0x7f0000000000)=@query={@target_ifindex, 0x5, 0x5, 0xff, 0x8, @prog_cnt=0xdc0, 0x0, 0x3, 0x40, 0xc}, 0xe3)
mmap$auto(0x97e0, 0x2020008, 0x40000001, 0xeb1, r0, 0x8)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytd\x00', 0x800, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r1, 0x541c, r2)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r4, 0x5422, 0x0)

45.846073892s ago: executing program 8 (id=643):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
open(&(0x7f0000000040)='./file0\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8, 0xffffffff})
mmap$auto(0x0, 0x2020009, 0x9, 0x16, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x3, 0x2000d, 0x4000000000df, 0xeb1, r2, 0x4)
r3 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r3, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r6 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r6, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)

44.486890371s ago: executing program 39 (id=628):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0)

30.467136902s ago: executing program 40 (id=643):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto(0x3, 0x81484d11, 0x38)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
open(&(0x7f0000000040)='./file0\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8, 0xffffffff})
mmap$auto(0x0, 0x2020009, 0x9, 0x16, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x3, 0x2000d, 0x4000000000df, 0xeb1, r2, 0x4)
r3 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r3, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r6 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0)
write$auto_proc_uid_map_operations_base(r6, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)

9.099106414s ago: executing program 2 (id=705):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xf5b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
read$auto_stats_fops_(r3, 0x0, 0x0)
unshare$auto(0x3)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)

7.323942322s ago: executing program 0 (id=710):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0)
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
sysfs$auto(0x2, 0x3ff, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
socket(0x1e, 0x80000, 0x9)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r2 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10)
write$auto_dev_fops_plock(r2, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)

6.881797963s ago: executing program 2 (id=711):
mmap$auto(0x0, 0x400008, 0xdf, 0x1b72, 0x2, 0x8000)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x4605, 0x0)
r1 = io_uring_setup$auto(0x1d48, 0x0)
ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x80000000)
close_range$auto(0x2, r1, 0x0)
syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000280)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00', 0x3)

5.744563665s ago: executing program 9 (id=713):
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
sendfile$auto(r1, r1, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0x61, 0x10001, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0x1, 0x3fd6, 0x0, 0x28)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]})

5.719452556s ago: executing program 0 (id=714):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0x6, 0xbd, 0x0, 0x4}, &(0x7f00000001c0)=0xf7, &(0x7f0000000200), 0x1, 0x1000000000000, 0x9, 0x8, 0x5, 0x6bee, 0xd, 0x2, @inferred, @inferred=0xffffffffffffffff})
r4 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setfsuid$auto(0xee01)
mmap$auto(0x8, 0x61, 0x10001, 0x1ff, r3, 0xc)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

5.62822261s ago: executing program 2 (id=715):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
read$auto_stats_fops_(r3, 0x0, 0x0)
unshare$auto(0x3)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xff0f)

5.483120876s ago: executing program 9 (id=716):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket$nl_generic(0x10, 0x3, 0x10)
capset$auto(0x0, 0x0)
setsockopt$auto(r2, 0x1, 0xd, 0x0, 0x9)

4.716518597s ago: executing program 9 (id=718):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setpgid$auto(0x0, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r2, 0x0, 0x81)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000003180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000031c0)={0x14, r6, 0x74efa931a85e033b, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004814}, 0x40820)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000c80)={0x684, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x519, 0x3, 0x0, 0x1, [@nested={0xcd, 0x85, 0x0, 0x1, [@typed={0x8, 0x154, 0x0, 0x0, @fd=r5}, @generic="1c7249add1c54c729d08f067dd3c64287945a5609fb6e7a9fc4f80e2b8003859fe5736a230505d7fb5c83849f4159ba8d1c8f698c4e2d4514f278bc16947", @generic="39b5cd93a5534861f0365183a94da37365bb84a6d685d079cdf51c1c3f8eed4a10d19f66b7ea7778902aa073e2fdfe02898a59a9e3cf08446724e12282339fcc6bf9f854b825d282c46260ad18cffd6f6388f1ac74e045557cdc4a4e7d3fd0af523587399f0ff17a8e3b27fc925551", @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, @typed={0x4, 0xe2}, @nested={0x32, 0xa, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @uid}, @nested={0x4, 0xe7}, @nested={0x4, 0x4}, @generic="0c9dea1427f5cc138d14aa57ec2e4b10cb781da2b70f5709eea3", @typed={0x4, 0x157}]}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@empty}, @generic="8d5732b960df4d4e4aaa14df8fa23ba5d95b236ceb38e03e2a76f57f0977c377d84fb26c89ff3c7dee750a67061aaa48a8a5a7297dd91002bd4f84ec67f5089cd42d7501d94f6c118f4f12aa6f98d8ea3ff317c26f03e6e3ef1697dec5b25f61e9c3cc1035abf8fcad29cbe7044ad411849b02cb079f539c1806ec67e23361f283f9fcc8ffee211c9cc36f43a7e35256f1892b4d7045d2bb423e339dfb8e6d9b0af344c76ec54acad3b88c47793ed6e1a29c1a6f70c6bd5351cdf31f9ba4b5a998d2afe0b551bca2991b96a7a374910c3fadda840ccdf985162d1f26590d2de2eb868375", @generic="68edeccc81cab4d0c740fa8a2c4f8edd517ab7ecfdb68757a53a6d2cb383ad760ebb264b33cf7d010a8b03bedefcaee42688addc041b6de057172208f43237aa7e471bded2bc6da03cbd7eaf512270a838cc6f57c2673f73a89fde48d879db59c5caf6987801029eda65cac639e4ada0bb391b117cf1bf144724f5c1aa68c34c48d325671b871356d2c6a44772e7ba7b72caa345e72693381e22553a6982f116cb2d42a76049e03163", @nested={0x1de, 0xa6, 0x0, 0x1, [@typed={0x14, 0x126, 0x0, 0x0, @ipv6=@private2}, @generic="5bfb8f773d7cb66714e3b811dd47fc41f4868e345b0852985aa7b9900ebb6c579cf2af265fea8b6f5f035238438eb149e9f52322a19e3fd5fecf045846b23239199d7f46358878687dd5e35b19c3f464173db9e097999378eb9027fb53eda1c218904cac6942", @typed={0x8, 0x129, 0x0, 0x0, @fd=r0}, @nested={0x14, 0x85, 0x0, 0x1, [@generic="ba1c7e639731e6c3", @typed={0x8, 0x66, 0x0, 0x0, @pid}]}, @nested={0x144, 0xee, 0x0, 0x1, [@generic="c7de550d7a8117704774ba438d7932d68e4bab94c43a77e5d6b1d3516a4e4ff0d65544805b197bbbb276310eb53c366dad66f524ffd990b23323f9db4ac6dc365ef9ca0b115bcb84d8e77008f3fc88575fa87f11d0a8fa2772057abb172c617e8d343d8caab0817fb37031950f17be108414d386857062e4535fdf0c14ba857e60d2e8aa6fa2c12bf7b5fa37331de4198e9ade10a62ca924a0cf92304020c745199c182dd03f7568d37a2c245d2aafa011e53d07bf3c02d7de323911def77b5ebbc7b889f6a3b4", @generic="dd0f05ce0bff00a2e0b60b33ba11478a9b7a61fcc547cf94fba8bdb415bc3ec8abe39237b0163f8968ea44ab9d5ac76a83cff286dc800f94d3a9336fb74af9929d5054bb9079ac6bbd85da28026e4da9934d2dd1ef6d8a3a188096401ee4780066408b751de9597bcff414f673436ad0205dfb15e608412b92"]}]}, @nested={0x51, 0x131, 0x0, 0x1, [@generic="bcfe0f1f5411d84a540d2b4c9075034dca8fee927c37d4718228cfc056ae25be472d02d694ac868237663cf7972498a1a9f223a4b03a15c1865c089b2b68e29a2697e947028735bf192b4fc85e"]}, @generic="5f57e7b6dbd7e595e34ac6d32649c9463a3be9f91d40d30ae62b319784271932fceb654efaa01e2d65eda34761ade2480177bfc9a571934a8a2e227910d07123386ae7d5"]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @str='{!:{\\&:\x00'}]}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@typed={0x37, 0x84, 0x0, 0x0, @binary="4cb8c91197082499ca932036a22bf2621dd03ecff3d72313e37ada0bf4e190a1512be3354b8718b8eed6ea01602824cd1920e7"}, @nested={0x106, 0x156, 0x0, 0x1, [@typed={0xe7, 0x5c, 0x0, 0x0, @binary="0dee2d8f72bd914d42e34a2af30c27de7858285d067498e9a56faf432d26acf8493745ff1cad77eca9bade5a3c1b9389eb86b2eb58edf0405234ee54b78acdfb1608583b55b44db395d90fd3b4925e3c3b1db8f386a9f64055f562352dedbdd515722ef07681d5fe5984984152150eff847c0fac3c93e48dc648929d9c61de338748add2cb33411a5c05d93e98728c75797bbe0ba1f8939c58becab22a3010f42ce2d1582cf5da95d31aa1c6135cd43ee6e9b8d48515b5cf344c2dd3330a76eae8f219e73e8bd418a5175c0ef9be9b5db8ece85ba0251d082d4a13e5303cb855775f88"}, @generic="d5ec87c71162", @typed={0xc, 0x124, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile$auto(r4, r5, 0x0, 0x1000200)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr4/dev_id\x00', 0xa0000, 0x0)

4.19611086s ago: executing program 1 (id=719):
mmap$auto(0xc, 0x4, 0xfffffffffffffffe, 0xeb4, 0xffffffffffffffff, 0x1157a6c6)
socket(0x10, 0x2, 0x0)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_add_rule$auto(r0, 0x1, 0x0, 0x0)
setresuid$auto(0x8, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0)
close_range$auto(0x0, 0x5, 0x0)
inotify_init1$auto(0x3000000000000)
sysinfo$auto(&(0x7f0000000080)={0x1, [0x3, 0x1, 0x8], 0x2, 0xe, 0x5, 0x8000000000000000, 0x8, 0x1, 0x68, 0x0, 0x3, 0x7, 0x5})
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
pipe$auto(0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mkdir$auto(0x0, 0x8001)
mount$auto(0x0, 0x0, 0x0, 0x3, 0x0)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0)

4.195474845s ago: executing program 0 (id=720):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000011, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto_proc_oom_score_adj_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/151, 0x97)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x0)
write$auto_proc_oom_adj_operations_base(r1, &(0x7f0000000180)="3e4e399e4a5c75de8004122b53dd06410f8d5cb92ee5a08c52dc1f8717557df0bbc822bb25b7420b16eac7be2a355be0031b03172b74428acfe4651add456a58ac511aa34507cd06b4f987ed9dd4b4d4a9a058fa72848c0be8ed35431f3b24b2a424713edd601f9784", 0x69)
r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0)
setuid$auto(0x0)
write$auto(r2, 0x0, 0xc)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0)

3.886381104s ago: executing program 1 (id=721):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7cc)

3.557147589s ago: executing program 0 (id=722):
timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x1000)
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r3 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto_BLKGETZONESZ(r2, 0x80041284, &(0x7f0000000180)=0x7)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
bpf$auto(0x3, &(0x7f0000000080)=@test={r3, 0x5, 0x7, 0xb, 0xffffffff7fffffff, 0x6, 0x9, 0x0, 0xff, 0x6, 0x1, 0xfff, 0xa1, 0x9, 0xffff30e5}, 0xd)

3.414717177s ago: executing program 9 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0)
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
sysfs$auto(0x2, 0x3ff, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
socket(0x1e, 0x80000, 0x9)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r2 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10)
write$auto_dev_fops_plock(r2, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)

3.385715782s ago: executing program 1 (id=724):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0x6, 0xbd, 0x0, 0x4}, &(0x7f00000001c0)=0xf7, &(0x7f0000000200), 0x1, 0x1000000000000, 0x9, 0x8, 0x5, 0x6bee, 0xd, 0x2, @inferred, @inferred=0xffffffffffffffff})
r4 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setfsuid$auto(0xee01)
mmap$auto(0x8, 0x61, 0x10001, 0x1ff, r3, 0xc)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

3.216926359s ago: executing program 2 (id=725):
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
sendfile$auto(r1, r1, 0x0, 0x7fffffffffffffff)
mmap$auto(0x0, 0x61, 0x10001, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0x1, 0x3fd6, 0x0, 0x28)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]})

2.746349705s ago: executing program 2 (id=726):
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x2)
madvise$auto(0x5, 0x4, 0xc)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x448402, 0x0)
r2 = socket(0x0, 0x5, 0x7)
getsockname$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, &(0x7f0000000100)=0x100005)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, r4, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x5, 0x5, 0x0, 0x1, [@generic="01"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880)
read$auto(r1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x81, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/206, 0xce)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x10000, 0x0)
socket(0x2, 0x80002, 0x73)
io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4055}, 0x20000004)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)

2.24938026s ago: executing program 9 (id=727):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r2, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_BCH_IOCTL_DISK_SET_STATE(r0, 0x4010bc08, &(0x7f0000000400)={0x100, 0x9d, '\x00', 0xfffffffffffffffa})
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r4 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
read$auto_stats_fops_(r4, 0x0, 0x0)
unshare$auto(0x3)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd03, &(0x7f00000001c0))
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)

1.259849873s ago: executing program 2 (id=728):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0x6, 0xbd, 0x0, 0x4}, &(0x7f00000001c0)=0xf7, &(0x7f0000000200), 0x1, 0x1000000000000, 0x9, 0x8, 0x5, 0x6bee, 0xd, 0x2, @inferred, @inferred=0xffffffffffffffff})
r4 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setfsuid$auto(0xee01)
mmap$auto(0x8, 0x61, 0x10001, 0x1ff, r3, 0xc)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

1.254693757s ago: executing program 0 (id=736):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040071}, 0x800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0x6, 0xbd, 0x0, 0x4}, &(0x7f00000001c0)=0xf7, &(0x7f0000000200), 0x1, 0x1000000000000, 0x9, 0x8, 0x5, 0x6bee, 0xd, 0x2, @inferred, @inferred=0xffffffffffffffff})
r4 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setfsuid$auto(0xee01)
mmap$auto(0x8, 0x61, 0x10001, 0x1ff, r3, 0xc)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

1.169548914s ago: executing program 1 (id=729):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0xa, 0x801, 0x84) (async)
io_uring_setup$auto(0x6, 0x0) (async)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) (rerun: 32)
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0xfffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) (async)
r3 = dup$auto(r2) (async)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto(r4, 0x81004523, r3)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r5, 0x0, 0x400100000001, 0x1ff)
unshare$auto(0x40000080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'})
socket(0x10, 0x3, 0x6) (async)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) (async)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103})
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)

506.670689ms ago: executing program 1 (id=730):
close_range$auto(0x2, 0xa, 0x0)
socket(0x10, 0x2, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x4d, 0x1)
r0 = socket(0x27, 0x804, 0xfffffffd)
r1 = getsockopt$auto(r0, 0x40000060, 0x1e, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) (async)
r2 = fcntl$auto(r0, 0x1, 0x1) (async)
mmap$auto(0x80000, 0x4020009, 0xdf, 0xeb1, r1, 0x8000)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x3)
fallocate$auto(r3, 0x0, 0x1, 0x8)
fallocate$auto(0x8000000000000003, 0x3, 0x11, 0x200000004)
r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.read_bps_device\x00', 0x2002, 0x0)
write$auto(r5, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
r6 = socket(0x15, 0x5, 0x0)
bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000600)="23cfaba15f36109ea71775ece76fa088b0a05fdce282a19ab8e19ab299aeee4d7df21c2dbda60a2864b68a5c74f7a1db7b2a22d78ac0e8ec4469beeb940d021952d2113eff4b5f19ec728e9f24b161156f939bb10a5b5e6d6724f15941c66bffedc7407854aec95165655d9503f1fb2045c6be215d6bab7a1f3f8208be4ad6459483924d567cda045d532c64978c78974096ade8d3306e1b9153eaf056bf81db92c9d6f75060580e5f584a8b0eaa92c0621ea43203df7a67c14433dbf0", 0x7fc, 0x0, 0x8, 0x0, 0x9, 0x4}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r7, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) (async)
recvmsg$auto(0x4, 0x0, 0x33c) (async)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r4) (async)
msgctl$auto(0x10000, 0x6, &(0x7f0000000100)={{0x400, <r9=>0xee01, 0xffffffffffffffff, 0x4, 0x1, 0x623}, &(0x7f0000000080)=0xd, &(0x7f00000000c0)=0x87, 0x5, 0x100000001, 0x4, 0xffffffff, 0x2dc, 0x81, 0x101, 0x6, @inferred=0xffffffffffffffff, @raw=0x3})
r10 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x200000, 0x0)
sendmsg$auto_ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000002540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002500)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf252000000008000500b70700000400038008000500d3000000080005ee05000000602203800411128008000d00", @ANYRESOCT=r0, @ANYBLOB="040077800400df800400408004004e80dbefecab35d87443b1daa3bd99bae0605058cf2a35c6630976246b897127bf9b1a2fc1795986fbebd49975955955981ba3e3e3073190ec531be9221178cbf4597ac023f2a7a8fd0cc33117dabce24352c9413569fd7e2e5c8a06e681729662bc2943cd9bfa216d698b8a53f4a331aec1910325bbc3a08d758ab62f5960763a70c86064f9f4fddd569228b5adeaa4caa3561909bb97be23c30400fc8008003600", @ANYRES32=r10, @ANYRESHEX=r8, @ANYRES32=r9, @ANYRES32=r3, @ANYRESDEC=r9, @ANYBLOB="03dba38f000000000000000980"], 0x22ac}, 0x1, 0x0, 0x0, 0x90}, 0x4090)

173.748321ms ago: executing program 1 (id=731):
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
ioctl$auto(0x3, 0x89e0, r0)

142.738328ms ago: executing program 0 (id=732):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
read$auto_stats_fops_(r3, 0x0, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2000, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
unshare$auto(0x3)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)

0s ago: executing program 9 (id=733):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x1ff, 0x0)
setsockopt$auto(r2, 0x1, 0xd, 0x0, 0x9)

kernel console output (not intermixed with test programs):

yzkaller #0 PREEMPT(full) 
[  183.535188][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  183.535197][ T7760] Call Trace:
[  183.535202][ T7760]  <TASK>
[  183.535208][ T7760]  dump_stack_lvl+0x100/0x190
[  183.535235][ T7760]  should_fail_ex.cold+0x5/0xa
[  183.535254][ T7760]  _copy_from_user+0x2e/0xd0
[  183.535274][ T7760]  copy_msghdr_from_user+0x9f/0x4f0
[  183.535294][ T7760]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  183.535316][ T7760]  ? __pfx__kstrtoull+0x10/0x10
[  183.535342][ T7760]  ___sys_sendmsg+0x106/0x1e0
[  183.535362][ T7760]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.535389][ T7760]  ? find_held_lock+0x2b/0x80
[  183.535415][ T7760]  __sys_sendmmsg+0x205/0x430
[  183.535441][ T7760]  ? __pfx___sys_sendmmsg+0x10/0x10
[  183.535470][ T7760]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  183.535494][ T7760]  ? fput+0x79/0x100
[  183.535512][ T7760]  ? ksys_write+0x1ac/0x250
[  183.535525][ T7760]  ? __pfx_ksys_write+0x10/0x10
[  183.535543][ T7760]  __x64_sys_sendmmsg+0x9c/0x100
[  183.535565][ T7760]  ? lockdep_hardirqs_on+0x78/0x100
[  183.535579][ T7760]  do_syscall_64+0x106/0xf80
[  183.535597][ T7760]  ? clear_bhb_loop+0x40/0x90
[  183.535615][ T7760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.535630][ T7760] RIP: 0033:0x7f9e8d19c819
[  183.535643][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.535656][ T7760] RSP: 002b:00007f9e8e052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  183.535670][ T7760] RAX: ffffffffffffffda RBX: 00007f9e8d415fa0 RCX: 00007f9e8d19c819
[  183.535679][ T7760] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000009
[  183.535688][ T7760] RBP: 00007f9e8e052090 R08: 0000000000000000 R09: 0000000000000000
[  183.535696][ T7760] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001
[  183.535704][ T7760] R13: 00007f9e8d416038 R14: 00007f9e8d415fa0 R15: 00007ffe1e4a70e8
[  183.535723][ T7760]  </TASK>
[  184.200844][ T7774] =======================================================
[  184.200844][ T7774] WARNING: The mand mount option has been deprecated and
[  184.200844][ T7774]          and is ignored by this kernel. Remove the mand
[  184.200844][ T7774]          option from the mount to silence this warning.
[  184.200844][ T7774] =======================================================
[  186.705734][ T7820] FAULT_INJECTION: forcing a failure.
[  186.705734][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.719672][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) 
[  186.719699][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.719709][ T7820] Call Trace:
[  186.719715][ T7820]  <TASK>
[  186.719721][ T7820]  dump_stack_lvl+0x100/0x190
[  186.719751][ T7820]  should_fail_ex.cold+0x5/0xa
[  186.719770][ T7820]  _copy_from_user+0x2e/0xd0
[  186.719790][ T7820]  snd_pcm_oss_write2+0x1c2/0x400
[  186.719811][ T7820]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  186.719836][ T7820]  snd_pcm_oss_write+0x729/0xa30
[  186.719857][ T7820]  ? security_file_permission+0x76/0x210
[  186.719882][ T7820]  vfs_write+0x2aa/0x1070
[  186.719898][ T7820]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  186.719919][ T7820]  ? __pfx_vfs_write+0x10/0x10
[  186.719931][ T7820]  ? find_held_lock+0x2b/0x80
[  186.719953][ T7820]  ? __fget_files+0x215/0x3d0
[  186.719978][ T7820]  ? __fget_files+0x215/0x3d0
[  186.720008][ T7820]  ? __fget_files+0x21f/0x3d0
[  186.720044][ T7820]  ksys_write+0x12a/0x250
[  186.720059][ T7820]  ? __pfx_ksys_write+0x10/0x10
[  186.720080][ T7820]  do_syscall_64+0x106/0xf80
[  186.720094][ T7820]  ? clear_bhb_loop+0x40/0x90
[  186.720112][ T7820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.720127][ T7820] RIP: 0033:0x7fd74979c819
[  186.720152][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.720181][ T7820] RSP: 002b:00007fd74a5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  186.720206][ T7820] RAX: ffffffffffffffda RBX: 00007fd749a16180 RCX: 00007fd74979c819
[  186.720224][ T7820] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  186.720238][ T7820] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  186.720254][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.720269][ T7820] R13: 00007fd749a16218 R14: 00007fd749a16180 R15: 00007fff09c4f708
[  186.720304][ T7820]  </TASK>
[  187.024128][ T7823] FAULT_INJECTION: forcing a failure.
[  187.024128][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.037333][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.0.365 Not tainted syzkaller #0 PREEMPT(full) 
[  187.037370][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  187.037386][ T7823] Call Trace:
[  187.037395][ T7823]  <TASK>
[  187.037405][ T7823]  dump_stack_lvl+0x100/0x190
[  187.037465][ T7823]  should_fail_ex.cold+0x5/0xa
[  187.037501][ T7823]  _copy_from_user+0x2e/0xd0
[  187.037539][ T7823]  snd_pcm_oss_write2+0x1c2/0x400
[  187.037586][ T7823]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  187.037636][ T7823]  snd_pcm_oss_write+0x729/0xa30
[  187.037676][ T7823]  ? security_file_permission+0x76/0x210
[  187.037723][ T7823]  vfs_write+0x2aa/0x1070
[  187.037753][ T7823]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  187.037795][ T7823]  ? __pfx_vfs_write+0x10/0x10
[  187.037820][ T7823]  ? find_held_lock+0x2b/0x80
[  187.037847][ T7823]  ? __fget_files+0x215/0x3d0
[  187.037875][ T7823]  ? __fget_files+0x215/0x3d0
[  187.037909][ T7823]  ? __fget_files+0x21f/0x3d0
[  187.037948][ T7823]  ksys_write+0x12a/0x250
[  187.037976][ T7823]  ? __pfx_ksys_write+0x10/0x10
[  187.038015][ T7823]  do_syscall_64+0x106/0xf80
[  187.038042][ T7823]  ? clear_bhb_loop+0x40/0x90
[  187.038078][ T7823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.038108][ T7823] RIP: 0033:0x7f4a6519c819
[  187.038131][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.038158][ T7823] RSP: 002b:00007f4a660aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  187.038185][ T7823] RAX: ffffffffffffffda RBX: 00007f4a65416090 RCX: 00007f4a6519c819
[  187.038204][ T7823] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  187.038222][ T7823] RBP: 00007f4a65232c91 R08: 0000000000000000 R09: 0000000000000000
[  187.038254][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.038272][ T7823] R13: 00007f4a65416128 R14: 00007f4a65416090 R15: 00007fff2bd66a58
[  187.038311][ T7823]  </TASK>
[  189.260134][ T7863] FAULT_INJECTION: forcing a failure.
[  189.260134][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.274991][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.1.376 Not tainted syzkaller #0 PREEMPT(full) 
[  189.275015][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  189.275024][ T7863] Call Trace:
[  189.275029][ T7863]  <TASK>
[  189.275035][ T7863]  dump_stack_lvl+0x100/0x190
[  189.275063][ T7863]  should_fail_ex.cold+0x5/0xa
[  189.275082][ T7863]  _copy_from_user+0x2e/0xd0
[  189.275103][ T7863]  snd_pcm_oss_write2+0x1c2/0x400
[  189.275125][ T7863]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  189.275150][ T7863]  snd_pcm_oss_write+0x729/0xa30
[  189.275180][ T7863]  ? security_file_permission+0x76/0x210
[  189.275205][ T7863]  vfs_write+0x2aa/0x1070
[  189.275222][ T7863]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  189.275243][ T7863]  ? __pfx_vfs_write+0x10/0x10
[  189.275256][ T7863]  ? find_held_lock+0x2b/0x80
[  189.275274][ T7863]  ? __fget_files+0x215/0x3d0
[  189.275288][ T7863]  ? __fget_files+0x215/0x3d0
[  189.275306][ T7863]  ? __fget_files+0x21f/0x3d0
[  189.275327][ T7863]  ksys_write+0x12a/0x250
[  189.275342][ T7863]  ? __pfx_ksys_write+0x10/0x10
[  189.275363][ T7863]  do_syscall_64+0x106/0xf80
[  189.275377][ T7863]  ? clear_bhb_loop+0x40/0x90
[  189.275396][ T7863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.275414][ T7863] RIP: 0033:0x7f09fa79c819
[  189.275427][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.275441][ T7863] RSP: 002b:00007f09fb5e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  189.275455][ T7863] RAX: ffffffffffffffda RBX: 00007f09faa16180 RCX: 00007f09fa79c819
[  189.275465][ T7863] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  189.275473][ T7863] RBP: 00007f09fa832c91 R08: 0000000000000000 R09: 0000000000000000
[  189.275481][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.275489][ T7863] R13: 00007f09faa16218 R14: 00007f09faa16180 R15: 00007ffea6b00718
[  189.275515][ T7863]  </TASK>
[  189.991950][ T7872] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[  190.258906][ T7876] FAULT_INJECTION: forcing a failure.
[  190.258906][ T7876] name failslab, interval 1, probability 0, space 0, times 0
[  190.303408][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(full) 
[  190.303433][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  190.303442][ T7876] Call Trace:
[  190.303447][ T7876]  <TASK>
[  190.303453][ T7876]  dump_stack_lvl+0x100/0x190
[  190.303481][ T7876]  should_fail_ex.cold+0x5/0xa
[  190.303500][ T7876]  should_failslab+0xc2/0x120
[  190.303517][ T7876]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  190.303540][ T7876]  ? __anon_vma_prepare+0x344/0x5e0
[  190.303564][ T7876]  __anon_vma_prepare+0x344/0x5e0
[  190.303583][ T7876]  ? __pfx___pte_alloc+0x10/0x10
[  190.303601][ T7876]  __vmf_anon_prepare+0x11f/0x250
[  190.303620][ T7876]  do_anonymous_page+0x552/0x1fb0
[  190.303641][ T7876]  ? do_raw_spin_unlock+0x145/0x1e0
[  190.303665][ T7876]  ? __pmd_alloc+0x3fb/0x950
[  190.303691][ T7876]  __handle_mm_fault+0x1d48/0x2b60
[  190.303714][ T7876]  ? mt_find+0x45e/0x8e0
[  190.303731][ T7876]  ? __pfx___handle_mm_fault+0x10/0x10
[  190.303751][ T7876]  ? __pfx_mt_find+0x10/0x10
[  190.303781][ T7876]  handle_mm_fault+0x36d/0xa20
[  190.303806][ T7876]  __get_user_pages+0xf9c/0x34d0
[  190.303831][ T7876]  ? __pfx___get_user_pages+0x10/0x10
[  190.303853][ T7876]  populate_vma_page_range+0x267/0x3f0
[  190.303873][ T7876]  ? __pfx_populate_vma_page_range+0x10/0x10
[  190.303891][ T7876]  ? __pfx_find_vma_intersection+0x10/0x10
[  190.303908][ T7876]  ? do_mmap+0x93f/0x12f0
[  190.303927][ T7876]  __mm_populate+0x107/0x3a0
[  190.303946][ T7876]  ? __pfx___mm_populate+0x10/0x10
[  190.303965][ T7876]  ? up_write+0x290/0x4f0
[  190.303989][ T7876]  vm_mmap_pgoff+0x37f/0x470
[  190.304008][ T7876]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  190.304028][ T7876]  ? __fget_files+0x215/0x3d0
[  190.304043][ T7876]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  190.304063][ T7876]  ksys_mmap_pgoff+0xe1/0x650
[  190.304086][ T7876]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  190.304101][ T7876]  ? fput+0x79/0x100
[  190.304119][ T7876]  ? ksys_write+0x1ac/0x250
[  190.304132][ T7876]  ? __pfx_ksys_write+0x10/0x10
[  190.304148][ T7876]  __x64_sys_mmap+0x125/0x190
[  190.304173][ T7876]  do_syscall_64+0x106/0xf80
[  190.304187][ T7876]  ? clear_bhb_loop+0x40/0x90
[  190.304205][ T7876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.304220][ T7876] RIP: 0033:0x7f4a6519c819
[  190.304233][ T7876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.304246][ T7876] RSP: 002b:00007f4a660cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  190.304260][ T7876] RAX: ffffffffffffffda RBX: 00007f4a65415fa0 RCX: 00007f4a6519c819
[  190.304270][ T7876] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  190.304278][ T7876] RBP: 00007f4a660cb090 R08: 0000000000000002 R09: 0000000000008000
[  190.304286][ T7876] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001
[  190.304294][ T7876] R13: 00007f4a65416038 R14: 00007f4a65415fa0 R15: 00007fff2bd66a58
[  190.304313][ T7876]  </TASK>
[  191.431696][ T7883] bond0: invalid ARP target specified
[  191.478386][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'.
[  191.487962][ T7883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.497705][ T7883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.516517][ T7883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.525960][ T7883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.542662][ T7913] FAULT_INJECTION: forcing a failure.
[  192.542662][ T7913] name failslab, interval 1, probability 0, space 0, times 0
[  192.556850][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.1.387 Not tainted syzkaller #0 PREEMPT(full) 
[  192.556886][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  192.556903][ T7913] Call Trace:
[  192.556912][ T7913]  <TASK>
[  192.556922][ T7913]  dump_stack_lvl+0x100/0x190
[  192.556965][ T7913]  should_fail_ex.cold+0x5/0xa
[  192.556996][ T7913]  should_failslab+0xc2/0x120
[  192.557029][ T7913]  __kmalloc_cache_noprof+0x7a/0x6f0
[  192.557067][ T7913]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  192.557103][ T7913]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  192.557149][ T7913]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  192.557181][ T7913]  ? rcu_is_watching+0x12/0xc0
[  192.557205][ T7913]  ? trace_contention_end+0x140/0x180
[  192.557230][ T7913]  ? snd_pcm_oss_write+0x49a/0xa30
[  192.557250][ T7913]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  192.557269][ T7913]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  192.557292][ T7913]  ? lockdep_hardirqs_on+0x78/0x100
[  192.557306][ T7913]  ? __pfx___mutex_lock+0x10/0x10
[  192.557328][ T7913]  ? __pfx___might_resched+0x10/0x10
[  192.557356][ T7913]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  192.557377][ T7913]  snd_pcm_oss_write+0x4bb/0xa30
[  192.557397][ T7913]  ? bpf_lsm_file_permission+0x9/0x10
[  192.557411][ T7913]  ? security_file_permission+0x76/0x210
[  192.557435][ T7913]  vfs_write+0x2aa/0x1070
[  192.557450][ T7913]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  192.557471][ T7913]  ? __pfx_vfs_write+0x10/0x10
[  192.557484][ T7913]  ? find_held_lock+0x2b/0x80
[  192.557497][ T7913]  ? __fget_files+0x215/0x3d0
[  192.557511][ T7913]  ? __fget_files+0x215/0x3d0
[  192.557529][ T7913]  ? __fget_files+0x21f/0x3d0
[  192.557548][ T7913]  ksys_write+0x12a/0x250
[  192.557562][ T7913]  ? __pfx_ksys_write+0x10/0x10
[  192.557582][ T7913]  do_syscall_64+0x106/0xf80
[  192.557596][ T7913]  ? clear_bhb_loop+0x40/0x90
[  192.557614][ T7913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.557629][ T7913] RIP: 0033:0x7f09fa79c819
[  192.557642][ T7913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.557656][ T7913] RSP: 002b:00007f09fb608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  192.557670][ T7913] RAX: ffffffffffffffda RBX: 00007f09faa16090 RCX: 00007f09fa79c819
[  192.557680][ T7913] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  192.557688][ T7913] RBP: 00007f09fa832c91 R08: 0000000000000000 R09: 0000000000000000
[  192.557712][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.557721][ T7913] R13: 00007f09faa16128 R14: 00007f09faa16090 R15: 00007ffea6b00718
[  192.557742][ T7913]  </TASK>
[  193.274015][ T7919] FAULT_INJECTION: forcing a failure.
[  193.274015][ T7919] name failslab, interval 1, probability 0, space 0, times 0
[  193.288084][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT(full) 
[  193.288120][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  193.288135][ T7919] Call Trace:
[  193.288143][ T7919]  <TASK>
[  193.288152][ T7919]  dump_stack_lvl+0x100/0x190
[  193.288196][ T7919]  should_fail_ex.cold+0x5/0xa
[  193.288229][ T7919]  should_failslab+0xc2/0x120
[  193.288260][ T7919]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  193.288297][ T7919]  ? skb_clone+0x190/0x400
[  193.288340][ T7919]  skb_clone+0x190/0x400
[  193.288379][ T7919]  netlink_deliver_tap+0xaed/0xcc0
[  193.288427][ T7919]  netlink_unicast+0x70c/0x870
[  193.288459][ T7919]  ? __pfx_netlink_unicast+0x10/0x10
[  193.288484][ T7919]  ? __alloc_skb+0x5b7/0x710
[  193.288522][ T7919]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  193.288558][ T7919]  netlink_ack+0x655/0xb80
[  193.288596][ T7919]  hsr_get_node_list+0x59d/0xb00
[  193.288635][ T7919]  ? __pfx_hsr_get_node_list+0x10/0x10
[  193.288674][ T7919]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  193.288706][ T7919]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  193.288747][ T7919]  genl_family_rcv_msg_doit+0x214/0x300
[  193.288782][ T7919]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  193.288813][ T7919]  ? genl_get_cmd+0x3ef/0x720
[  193.288857][ T7919]  ? __dev_queue_xmit+0x5af/0x4800
[  193.288890][ T7919]  ? __radix_tree_lookup+0x217/0x2b0
[  193.288932][ T7919]  genl_rcv_msg+0x560/0x800
[  193.288967][ T7919]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.288998][ T7919]  ? __pfx_hsr_get_node_list+0x10/0x10
[  193.289041][ T7919]  netlink_rcv_skb+0x159/0x420
[  193.289070][ T7919]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.289105][ T7919]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.289146][ T7919]  ? netlink_deliver_tap+0x1ae/0xcc0
[  193.289191][ T7919]  genl_rcv+0x28/0x40
[  193.289216][ T7919]  netlink_unicast+0x5aa/0x870
[  193.289250][ T7919]  ? __pfx_netlink_unicast+0x10/0x10
[  193.289293][ T7919]  netlink_sendmsg+0x8b0/0xda0
[  193.289326][ T7919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.289348][ T7919]  ? __import_iovec+0x1d2/0x640
[  193.289371][ T7919]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  193.289390][ T7919]  ____sys_sendmsg+0x9e1/0xb70
[  193.289408][ T7919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.289424][ T7919]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.289451][ T7919]  ___sys_sendmsg+0x190/0x1e0
[  193.289471][ T7919]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.289514][ T7919]  __sys_sendmsg+0x170/0x220
[  193.289538][ T7919]  ? __pfx___sys_sendmsg+0x10/0x10
[  193.289574][ T7919]  do_syscall_64+0x106/0xf80
[  193.289588][ T7919]  ? clear_bhb_loop+0x40/0x90
[  193.289607][ T7919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.289621][ T7919] RIP: 0033:0x7fd74979c819
[  193.289635][ T7919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.289648][ T7919] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.289663][ T7919] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  193.289672][ T7919] RDX: 0000000000000040 RSI: 00002000000009c0 RDI: 0000000000000003
[  193.289680][ T7919] RBP: 00007fd74a60b090 R08: 0000000000000000 R09: 0000000000000000
[  193.289689][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.289697][ T7919] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  193.289716][ T7919]  </TASK>
[  193.711594][ T7922] capability: warning: `syz.3.390' uses 32-bit capabilities (legacy support in use)
[  194.123131][ T7934] FAULT_INJECTION: forcing a failure.
[  194.123131][ T7934] name failslab, interval 1, probability 0, space 0, times 0
[  194.136029][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(full) 
[  194.136050][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  194.136060][ T7934] Call Trace:
[  194.136065][ T7934]  <TASK>
[  194.136071][ T7934]  dump_stack_lvl+0x100/0x190
[  194.136100][ T7934]  should_fail_ex.cold+0x5/0xa
[  194.136119][ T7934]  should_failslab+0xc2/0x120
[  194.136136][ T7934]  __kvmalloc_node_noprof+0xfa/0xa00
[  194.136150][ T7934]  ? bucket_table_alloc.isra.0+0x88/0x460
[  194.136172][ T7934]  bucket_table_alloc.isra.0+0x88/0x460
[  194.136190][ T7934]  rhashtable_init_noprof+0x43b/0x7d0
[  194.136209][ T7934]  ioam6_net_init+0x11c/0x170
[  194.136226][ T7934]  ? __pfx_ioam6_net_init+0x10/0x10
[  194.136240][ T7934]  ops_init+0x1e2/0x5f0
[  194.136258][ T7934]  setup_net+0x118/0x3a0
[  194.136273][ T7934]  ? __pfx_setup_net+0x10/0x10
[  194.136286][ T7934]  ? lockdep_init_map_type+0x5c/0x250
[  194.136307][ T7934]  ? mutex_init_lockep+0x110/0x150
[  194.136330][ T7934]  copy_net_ns+0x46f/0x7c0
[  194.136348][ T7934]  create_new_namespaces+0x3ea/0xac0
[  194.136369][ T7934]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  194.136387][ T7934]  ksys_unshare+0x473/0xad0
[  194.136408][ T7934]  ? __pfx_ksys_unshare+0x10/0x10
[  194.136434][ T7934]  __x64_sys_unshare+0x31/0x40
[  194.136452][ T7934]  do_syscall_64+0x106/0xf80
[  194.136466][ T7934]  ? clear_bhb_loop+0x40/0x90
[  194.136484][ T7934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.136499][ T7934] RIP: 0033:0x7fd74979c819
[  194.136513][ T7934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.136526][ T7934] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  194.136540][ T7934] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  194.136550][ T7934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  194.136558][ T7934] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  194.136566][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.136574][ T7934] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  194.136593][ T7934]  </TASK>
[  194.390646][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.407437][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.644137][ T7930] Invalid ELF header magic: != ELF
[  199.191198][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  199.203064][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  199.211097][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  199.218955][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  199.230372][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  200.265866][ T8004] chnl_net:caif_netlink_parms(): no params data found
[  200.415508][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.468132][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.488714][ T8004] bridge_slave_0: entered allmulticast mode
[  200.507423][ T8004] bridge_slave_0: entered promiscuous mode
[  200.541143][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.549767][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.563372][ T8004] bridge_slave_1: entered allmulticast mode
[  200.571699][ T8004] bridge_slave_1: entered promiscuous mode
[  200.720822][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.752871][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.881003][ T8004] team0: Port device team_slave_0 added
[  200.908121][ T8004] team0: Port device team_slave_1 added
[  200.948499][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.969591][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.004351][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.050125][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.077846][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.112212][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.247325][ T8033] FAULT_INJECTION: forcing a failure.
[  201.247325][ T8033] name failslab, interval 1, probability 0, space 0, times 0
[  201.280646][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) 
[  201.280681][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  201.280696][ T8033] Call Trace:
[  201.280704][ T8033]  <TASK>
[  201.280713][ T8033]  dump_stack_lvl+0x100/0x190
[  201.280761][ T8033]  should_fail_ex.cold+0x5/0xa
[  201.280795][ T8033]  should_failslab+0xc2/0x120
[  201.280826][ T8033]  __kmalloc_cache_noprof+0x7a/0x6f0
[  201.280863][ T8033]  ? init_srcu_struct_fields+0xa69/0xfa0
[  201.280899][ T8033]  ? idr_alloc+0xdd/0x130
[  201.280930][ T8033]  init_srcu_struct_fields+0xa69/0xfa0
[  201.280971][ T8033]  dm_create+0x2a6/0x15a0
[  201.281014][ T8033]  dev_create+0x121/0x2a0
[  201.281041][ T8033]  ? __pfx_dev_create+0x10/0x10
[  201.281076][ T8033]  ctl_ioctl+0x4db/0xcd0
[  201.281118][ T8033]  ? __pfx_dev_create+0x10/0x10
[  201.281145][ T8033]  ? __pfx_ctl_ioctl+0x10/0x10
[  201.281221][ T8033]  ? __fget_files+0x21f/0x3d0
[  201.281265][ T8033]  dm_ctl_ioctl+0x22/0x30
[  201.281304][ T8033]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  201.281343][ T8033]  __x64_sys_ioctl+0x18e/0x210
[  201.281369][ T8033]  do_syscall_64+0x106/0xf80
[  201.281383][ T8033]  ? clear_bhb_loop+0x40/0x90
[  201.281401][ T8033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.281415][ T8033] RIP: 0033:0x7fd74979c819
[  201.281428][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.281442][ T8033] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.281456][ T8033] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  201.281465][ T8033] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000002
[  201.281474][ T8033] RBP: 00007fd74a60b090 R08: 0000000000000000 R09: 0000000000000000
[  201.281482][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.281490][ T8033] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  201.281508][ T8033]  </TASK>
[  201.483566][ T5830] Bluetooth: hci4: command tx timeout
[  201.520895][ T8004] hsr_slave_0: entered promiscuous mode
[  201.527140][ T8004] hsr_slave_1: entered promiscuous mode
[  201.538126][ T8004] debugfs: 'hsr0' already exists in 'hsr'
[  201.544944][ T8004] Cannot create hsr debugfs directory
[  202.192671][ T8004] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.327806][ T8004] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  202.383025][ T8004] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  202.417923][ T8004] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.608688][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.687571][ T8004] 8021q: adding VLAN 0 to HW filter on device team0
[  202.703436][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.710611][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.790900][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.798118][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.283851][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.542004][ T5830] Bluetooth: hci4: command tx timeout
[  203.692353][ T8004] veth0_vlan: entered promiscuous mode
[  203.725920][ T8004] veth1_vlan: entered promiscuous mode
[  203.825592][ T8004] veth0_macvtap: entered promiscuous mode
[  203.874006][ T8004] veth1_macvtap: entered promiscuous mode
[  203.953291][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.968164][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.986640][ T3022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.022452][ T3022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.108645][ T3022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.150822][ T3022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.296582][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.330787][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.407729][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.453195][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.692541][ T8091] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  204.742927][ T8004] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  205.183267][ T8096] FAULT_INJECTION: forcing a failure.
[  205.183267][ T8096] name failslab, interval 1, probability 0, space 0, times 0
[  205.200311][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) 
[  205.200350][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  205.200367][ T8096] Call Trace:
[  205.200376][ T8096]  <TASK>
[  205.200386][ T8096]  dump_stack_lvl+0x100/0x190
[  205.200435][ T8096]  should_fail_ex.cold+0x5/0xa
[  205.200470][ T8096]  should_failslab+0xc2/0x120
[  205.200503][ T8096]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  205.200532][ T8096]  ? ipv6_sysctl_net_init+0x30/0x2b0
[  205.200570][ T8096]  ? __pfx_ipv6_sysctl_net_init+0x10/0x10
[  205.200604][ T8096]  kmemdup_noprof+0x29/0x60
[  205.200631][ T8096]  ipv6_sysctl_net_init+0x30/0x2b0
[  205.200675][ T8096]  ? __pfx_ipv6_sysctl_net_init+0x10/0x10
[  205.200710][ T8096]  ops_init+0x1e2/0x5f0
[  205.200744][ T8096]  setup_net+0x118/0x3a0
[  205.200774][ T8096]  ? __pfx_setup_net+0x10/0x10
[  205.200800][ T8096]  ? lockdep_init_map_type+0x5c/0x250
[  205.200841][ T8096]  ? mutex_init_lockep+0x110/0x150
[  205.200885][ T8096]  copy_net_ns+0x46f/0x7c0
[  205.200917][ T8096]  create_new_namespaces+0x3ea/0xac0
[  205.200961][ T8096]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  205.200997][ T8096]  ksys_unshare+0x473/0xad0
[  205.201037][ T8096]  ? __pfx_ksys_unshare+0x10/0x10
[  205.201088][ T8096]  __x64_sys_unshare+0x31/0x40
[  205.201124][ T8096]  do_syscall_64+0x106/0xf80
[  205.201151][ T8096]  ? clear_bhb_loop+0x40/0x90
[  205.201186][ T8096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.201215][ T8096] RIP: 0033:0x7fb0f419c819
[  205.201239][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.201266][ T8096] RSP: 002b:00007fb0f5083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  205.201292][ T8096] RAX: ffffffffffffffda RBX: 00007fb0f4415fa0 RCX: 00007fb0f419c819
[  205.201310][ T8096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  205.201325][ T8096] RBP: 00007fb0f4232c91 R08: 0000000000000000 R09: 0000000000000000
[  205.201340][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.201354][ T8096] R13: 00007fb0f4416038 R14: 00007fb0f4415fa0 R15: 00007fff2a775c08
[  205.201388][ T8096]  </TASK>
[  205.631064][ T5830] Bluetooth: hci4: command tx timeout
[  207.701148][ T5830] Bluetooth: hci4: command tx timeout
[  207.861245][ T8135] FAULT_INJECTION: forcing a failure.
[  207.861245][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.883921][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.4.425 Not tainted syzkaller #0 PREEMPT(full) 
[  207.883960][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  207.883977][ T8135] Call Trace:
[  207.883986][ T8135]  <TASK>
[  207.883997][ T8135]  dump_stack_lvl+0x100/0x190
[  207.884047][ T8135]  should_fail_ex.cold+0x5/0xa
[  207.884083][ T8135]  _copy_from_user+0x2e/0xd0
[  207.884121][ T8135]  snd_pcm_oss_write2+0x1c2/0x400
[  207.884162][ T8135]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  207.884214][ T8135]  snd_pcm_oss_write+0x729/0xa30
[  207.884255][ T8135]  ? security_file_permission+0x76/0x210
[  207.884302][ T8135]  vfs_write+0x2aa/0x1070
[  207.884333][ T8135]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  207.884374][ T8135]  ? __pfx_vfs_write+0x10/0x10
[  207.884399][ T8135]  ? find_held_lock+0x2b/0x80
[  207.884427][ T8135]  ? __fget_files+0x215/0x3d0
[  207.884455][ T8135]  ? __fget_files+0x215/0x3d0
[  207.884490][ T8135]  ? __fget_files+0x21f/0x3d0
[  207.884529][ T8135]  ksys_write+0x12a/0x250
[  207.884558][ T8135]  ? __pfx_ksys_write+0x10/0x10
[  207.884597][ T8135]  do_syscall_64+0x106/0xf80
[  207.884634][ T8135]  ? clear_bhb_loop+0x40/0x90
[  207.884671][ T8135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.884701][ T8135] RIP: 0033:0x7fb0f419c819
[  207.884724][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.884750][ T8135] RSP: 002b:00007fb0f5041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  207.884777][ T8135] RAX: ffffffffffffffda RBX: 00007fb0f4416180 RCX: 00007fb0f419c819
[  207.884796][ T8135] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  207.884813][ T8135] RBP: 00007fb0f4232c91 R08: 0000000000000000 R09: 0000000000000000
[  207.884830][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.884847][ T8135] R13: 00007fb0f4416218 R14: 00007fb0f4416180 R15: 00007fff2a775c08
[  207.884885][ T8135]  </TASK>
[  210.473015][ T8165] FAULT_INJECTION: forcing a failure.
[  210.473015][ T8165] name failslab, interval 1, probability 0, space 0, times 0
[  210.487139][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(full) 
[  210.487177][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  210.487193][ T8165] Call Trace:
[  210.487203][ T8165]  <TASK>
[  210.487214][ T8165]  dump_stack_lvl+0x100/0x190
[  210.487263][ T8165]  should_fail_ex.cold+0x5/0xa
[  210.487298][ T8165]  should_failslab+0xc2/0x120
[  210.487331][ T8165]  __kmalloc_cache_noprof+0x7a/0x6f0
[  210.487367][ T8165]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  210.487414][ T8165]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  210.487456][ T8165]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  210.487495][ T8165]  ? rcu_is_watching+0x12/0xc0
[  210.487538][ T8165]  ? trace_contention_end+0x140/0x180
[  210.487583][ T8165]  ? snd_pcm_oss_write+0x49a/0xa30
[  210.487620][ T8165]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  210.487656][ T8165]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  210.487701][ T8165]  ? lockdep_hardirqs_on+0x78/0x100
[  210.487729][ T8165]  ? __pfx___mutex_lock+0x10/0x10
[  210.487771][ T8165]  ? __pfx___might_resched+0x10/0x10
[  210.487820][ T8165]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  210.487858][ T8165]  snd_pcm_oss_write+0x4bb/0xa30
[  210.487895][ T8165]  ? bpf_lsm_file_permission+0x9/0x10
[  210.487921][ T8165]  ? security_file_permission+0x76/0x210
[  210.487967][ T8165]  vfs_write+0x2aa/0x1070
[  210.487996][ T8165]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  210.488039][ T8165]  ? __pfx_vfs_write+0x10/0x10
[  210.488064][ T8165]  ? find_held_lock+0x2b/0x80
[  210.488102][ T8165]  ? __fget_files+0x215/0x3d0
[  210.488128][ T8165]  ? __fget_files+0x215/0x3d0
[  210.488161][ T8165]  ? __fget_files+0x21f/0x3d0
[  210.488199][ T8165]  ksys_write+0x12a/0x250
[  210.488227][ T8165]  ? __pfx_ksys_write+0x10/0x10
[  210.488265][ T8165]  do_syscall_64+0x106/0xf80
[  210.488293][ T8165]  ? clear_bhb_loop+0x40/0x90
[  210.488327][ T8165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.488355][ T8165] RIP: 0033:0x7fd74979c819
[  210.488380][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.488407][ T8165] RSP: 002b:00007fd74a5ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  210.488432][ T8165] RAX: ffffffffffffffda RBX: 00007fd749a16090 RCX: 00007fd74979c819
[  210.488450][ T8165] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  210.488466][ T8165] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  210.488494][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.488511][ T8165] R13: 00007fd749a16128 R14: 00007fd749a16090 R15: 00007fff09c4f708
[  210.488574][ T8165]  </TASK>
[  211.244100][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  211.255965][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  211.267618][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  211.276155][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  211.310426][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  211.893509][ T8170] chnl_net:caif_netlink_parms(): no params data found
[  212.042381][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.049619][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.057365][ T8170] bridge_slave_0: entered allmulticast mode
[  212.066402][ T8170] bridge_slave_0: entered promiscuous mode
[  212.075562][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.083337][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.090913][ T8170] bridge_slave_1: entered allmulticast mode
[  212.099173][ T8170] bridge_slave_1: entered promiscuous mode
[  212.139322][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.164201][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.242134][ T8170] team0: Port device team_slave_0 added
[  212.253433][ T8170] team0: Port device team_slave_1 added
[  212.346495][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.363853][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.426486][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.453708][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.470715][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.550250][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.732891][ T8170] hsr_slave_0: entered promiscuous mode
[  212.743351][ T8170] hsr_slave_1: entered promiscuous mode
[  212.750416][ T8170] debugfs: 'hsr0' already exists in 'hsr'
[  212.757304][ T8170] Cannot create hsr debugfs directory
[  213.380302][ T5830] Bluetooth: hci5: command tx timeout
[  213.602841][ T8170] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  213.673980][ T8170] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  213.704266][ T8170] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  213.756647][ T8170] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  214.009843][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.116207][ T8170] 8021q: adding VLAN 0 to HW filter on device team0
[  214.177743][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.185010][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.308169][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.315350][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.198513][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.472304][ T5830] Bluetooth: hci5: command tx timeout
[  216.084564][ T8170] veth0_vlan: entered promiscuous mode
[  216.158264][ T8170] veth1_vlan: entered promiscuous mode
[  216.267137][ T8170] veth0_macvtap: entered promiscuous mode
[  216.306925][ T8170] veth1_macvtap: entered promiscuous mode
[  216.343718][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.364569][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.401478][   T86] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.429693][   T86] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.439319][   T86] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.452587][   T86] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.978194][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.040479][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.230042][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.264651][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.550335][ T5830] Bluetooth: hci5: command tx timeout
[  219.194403][ T8280] FAULT_INJECTION: forcing a failure.
[  219.194403][ T8280] name failslab, interval 1, probability 0, space 0, times 0
[  219.299343][ T8280] CPU: 1 UID: 0 PID: 8280 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(full) 
[  219.299370][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  219.299380][ T8280] Call Trace:
[  219.299385][ T8280]  <TASK>
[  219.299392][ T8280]  dump_stack_lvl+0x100/0x190
[  219.299421][ T8280]  should_fail_ex.cold+0x5/0xa
[  219.299441][ T8280]  should_failslab+0xc2/0x120
[  219.299457][ T8280]  __kmalloc_cache_noprof+0x7a/0x6f0
[  219.299478][ T8280]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  219.299499][ T8280]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  219.299520][ T8280]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  219.299541][ T8280]  ? rcu_is_watching+0x12/0xc0
[  219.299572][ T8280]  ? trace_contention_end+0x140/0x180
[  219.299597][ T8280]  ? snd_pcm_oss_write+0x49a/0xa30
[  219.299617][ T8280]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  219.299637][ T8280]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  219.299660][ T8280]  ? lockdep_hardirqs_on+0x78/0x100
[  219.299675][ T8280]  ? __pfx___mutex_lock+0x10/0x10
[  219.299697][ T8280]  ? __pfx___might_resched+0x10/0x10
[  219.299724][ T8280]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  219.299745][ T8280]  snd_pcm_oss_write+0x4bb/0xa30
[  219.299766][ T8280]  ? bpf_lsm_file_permission+0x9/0x10
[  219.299781][ T8280]  ? security_file_permission+0x76/0x210
[  219.299804][ T8280]  vfs_write+0x2aa/0x1070
[  219.299820][ T8280]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  219.299841][ T8280]  ? __pfx_vfs_write+0x10/0x10
[  219.299854][ T8280]  ? find_held_lock+0x2b/0x80
[  219.299868][ T8280]  ? __fget_files+0x215/0x3d0
[  219.299883][ T8280]  ? __fget_files+0x215/0x3d0
[  219.299900][ T8280]  ? __fget_files+0x21f/0x3d0
[  219.299920][ T8280]  ksys_write+0x12a/0x250
[  219.299934][ T8280]  ? __pfx_ksys_write+0x10/0x10
[  219.299954][ T8280]  do_syscall_64+0x106/0xf80
[  219.299968][ T8280]  ? clear_bhb_loop+0x40/0x90
[  219.299986][ T8280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.300002][ T8280] RIP: 0033:0x7fb0f419c819
[  219.300015][ T8280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.300030][ T8280] RSP: 002b:00007fb0f5041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  219.300044][ T8280] RAX: ffffffffffffffda RBX: 00007fb0f4416180 RCX: 00007fb0f419c819
[  219.300055][ T8280] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  219.300063][ T8280] RBP: 00007fb0f4232c91 R08: 0000000000000000 R09: 0000000000000000
[  219.300072][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.300081][ T8280] R13: 00007fb0f4416218 R14: 00007fb0f4416180 R15: 00007fff2a775c08
[  219.300101][ T8280]  </TASK>
[  219.689551][ T5830] Bluetooth: hci5: command tx timeout
[  220.023092][ T8286] FAULT_INJECTION: forcing a failure.
[  220.023092][ T8286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.100894][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.5.446 Not tainted syzkaller #0 PREEMPT(full) 
[  220.100933][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  220.100949][ T8286] Call Trace:
[  220.100957][ T8286]  <TASK>
[  220.100968][ T8286]  dump_stack_lvl+0x100/0x190
[  220.101014][ T8286]  should_fail_ex.cold+0x5/0xa
[  220.101046][ T8286]  _copy_from_user+0x2e/0xd0
[  220.101084][ T8286]  snd_pcm_oss_write2+0x1c2/0x400
[  220.101124][ T8286]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  220.101173][ T8286]  snd_pcm_oss_write+0x729/0xa30
[  220.101217][ T8286]  ? security_file_permission+0x76/0x210
[  220.101273][ T8286]  vfs_write+0x2aa/0x1070
[  220.101303][ T8286]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  220.101344][ T8286]  ? __pfx_vfs_write+0x10/0x10
[  220.101368][ T8286]  ? find_held_lock+0x2b/0x80
[  220.101394][ T8286]  ? __fget_files+0x215/0x3d0
[  220.101421][ T8286]  ? __fget_files+0x215/0x3d0
[  220.101452][ T8286]  ? __fget_files+0x21f/0x3d0
[  220.101488][ T8286]  ksys_write+0x12a/0x250
[  220.101515][ T8286]  ? __pfx_ksys_write+0x10/0x10
[  220.101553][ T8286]  do_syscall_64+0x106/0xf80
[  220.101582][ T8286]  ? clear_bhb_loop+0x40/0x90
[  220.101618][ T8286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.101645][ T8286] RIP: 0033:0x7f6c8c19c819
[  220.101669][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.101695][ T8286] RSP: 002b:00007f6c8d020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  220.101711][ T8286] RAX: ffffffffffffffda RBX: 00007f6c8c416180 RCX: 00007f6c8c19c819
[  220.101721][ T8286] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  220.101731][ T8286] RBP: 00007f6c8c232c91 R08: 0000000000000000 R09: 0000000000000000
[  220.101740][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.101748][ T8286] R13: 00007f6c8c416218 R14: 00007f6c8c416180 R15: 00007ffff1f15278
[  220.101769][ T8286]  </TASK>
[  220.921272][ T8295] FAULT_INJECTION: forcing a failure.
[  220.921272][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.953931][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.5.449 Not tainted syzkaller #0 PREEMPT(full) 
[  220.953967][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  220.953982][ T8295] Call Trace:
[  220.953992][ T8295]  <TASK>
[  220.954002][ T8295]  dump_stack_lvl+0x100/0x190
[  220.954049][ T8295]  should_fail_ex.cold+0x5/0xa
[  220.954083][ T8295]  _copy_to_user+0x32/0xd0
[  220.954122][ T8295]  simple_read_from_buffer+0xcb/0x170
[  220.954170][ T8295]  proc_fail_nth_read+0x1af/0x230
[  220.954207][ T8295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  220.954247][ T8295]  ? rw_verify_area+0xce/0x6d0
[  220.954288][ T8295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  220.954324][ T8295]  vfs_read+0x1e4/0xb30
[  220.954363][ T8295]  ? __pfx_vfs_read+0x10/0x10
[  220.954389][ T8295]  ? __fget_files+0x215/0x3d0
[  220.954426][ T8295]  ? __fget_files+0x21f/0x3d0
[  220.954465][ T8295]  ksys_read+0x12a/0x250
[  220.954493][ T8295]  ? __pfx_ksys_read+0x10/0x10
[  220.954531][ T8295]  do_syscall_64+0x106/0xf80
[  220.954559][ T8295]  ? clear_bhb_loop+0x40/0x90
[  220.954594][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.954622][ T8295] RIP: 0033:0x7f6c8c15d04e
[  220.954645][ T8295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  220.954672][ T8295] RSP: 002b:00007f6c8d061fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  220.954699][ T8295] RAX: ffffffffffffffda RBX: 00007f6c8d0626c0 RCX: 00007f6c8c15d04e
[  220.954719][ T8295] RDX: 000000000000000f RSI: 00007f6c8d0620a0 RDI: 0000000000000004
[  220.954736][ T8295] RBP: 00007f6c8d062090 R08: 0000000000000000 R09: 0000000000000000
[  220.954753][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.954769][ T8295] R13: 00007f6c8c416038 R14: 00007f6c8c415fa0 R15: 00007ffff1f15278
[  220.954808][ T8295]  </TASK>
[  223.042219][ T8322] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  223.360836][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  223.381676][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  223.390883][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  223.402818][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  223.411538][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  225.460332][ T5830] Bluetooth: hci6: command tx timeout
[  226.241301][ T8324] chnl_net:caif_netlink_parms(): no params data found
[  226.793039][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.807258][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.815515][ T8363] FAULT_INJECTION: forcing a failure.
[  226.815515][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.830646][ T8324] bridge_slave_0: entered allmulticast mode
[  226.837677][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.458 Not tainted syzkaller #0 PREEMPT(full) 
[  226.837721][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  226.837739][ T8363] Call Trace:
[  226.837748][ T8363]  <TASK>
[  226.837759][ T8363]  dump_stack_lvl+0x100/0x190
[  226.837810][ T8363]  should_fail_ex.cold+0x5/0xa
[  226.837845][ T8363]  _copy_from_user+0x2e/0xd0
[  226.837883][ T8363]  snd_pcm_oss_write2+0x1c2/0x400
[  226.837927][ T8363]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  226.837977][ T8363]  snd_pcm_oss_write+0x729/0xa30
[  226.838020][ T8363]  ? security_file_permission+0x76/0x210
[  226.838067][ T8363]  vfs_write+0x2aa/0x1070
[  226.838099][ T8363]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  226.838142][ T8363]  ? __pfx_vfs_write+0x10/0x10
[  226.838168][ T8363]  ? find_held_lock+0x2b/0x80
[  226.838197][ T8363]  ? __fget_files+0x215/0x3d0
[  226.838225][ T8363]  ? __fget_files+0x215/0x3d0
[  226.838260][ T8363]  ? __fget_files+0x21f/0x3d0
[  226.838300][ T8363]  ksys_write+0x12a/0x250
[  226.838329][ T8363]  ? __pfx_ksys_write+0x10/0x10
[  226.838369][ T8363]  do_syscall_64+0x106/0xf80
[  226.838397][ T8363]  ? clear_bhb_loop+0x40/0x90
[  226.838435][ T8363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.838476][ T8363] RIP: 0033:0x7fd74979c819
[  226.838502][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.838538][ T8363] RSP: 002b:00007fd74a5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  226.838566][ T8363] RAX: ffffffffffffffda RBX: 00007fd749a16180 RCX: 00007fd74979c819
[  226.838586][ T8363] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  226.838603][ T8363] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  226.838628][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.838645][ T8363] R13: 00007fd749a16218 R14: 00007fd749a16180 R15: 00007fff09c4f708
[  226.838684][ T8363]  </TASK>
[  227.039471][ T8324] bridge_slave_0: entered promiscuous mode
[  227.048129][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.057655][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.065153][ T8324] bridge_slave_1: entered allmulticast mode
[  227.073013][ T8324] bridge_slave_1: entered promiscuous mode
[  227.110328][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.122849][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.164595][ T8324] team0: Port device team_slave_0 added
[  227.173373][ T8324] team0: Port device team_slave_1 added
[  227.208528][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.215579][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.241701][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.272259][ T8365] tc_dump_action: action bad kind
[  227.278343][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.285746][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.312000][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.545019][ T5830] Bluetooth: hci6: command tx timeout
[  227.641979][ T8324] hsr_slave_0: entered promiscuous mode
[  227.651500][ T8324] hsr_slave_1: entered promiscuous mode
[  227.658233][ T8324] debugfs: 'hsr0' already exists in 'hsr'
[  227.666865][ T8324] Cannot create hsr debugfs directory
[  227.751723][ T8370] FAULT_INJECTION: forcing a failure.
[  227.751723][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.813350][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.3.461 Not tainted syzkaller #0 PREEMPT(full) 
[  227.813374][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  227.813384][ T8370] Call Trace:
[  227.813390][ T8370]  <TASK>
[  227.813396][ T8370]  dump_stack_lvl+0x100/0x190
[  227.813429][ T8370]  should_fail_ex.cold+0x5/0xa
[  227.813448][ T8370]  _copy_from_user+0x2e/0xd0
[  227.813470][ T8370]  snd_pcm_oss_write2+0x1c2/0x400
[  227.813492][ T8370]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  227.813517][ T8370]  snd_pcm_oss_write+0x729/0xa30
[  227.813538][ T8370]  ? security_file_permission+0x76/0x210
[  227.813562][ T8370]  vfs_write+0x2aa/0x1070
[  227.813578][ T8370]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  227.813599][ T8370]  ? __pfx_vfs_write+0x10/0x10
[  227.813612][ T8370]  ? find_held_lock+0x2b/0x80
[  227.813626][ T8370]  ? __fget_files+0x215/0x3d0
[  227.813640][ T8370]  ? __fget_files+0x215/0x3d0
[  227.813658][ T8370]  ? __fget_files+0x21f/0x3d0
[  227.813685][ T8370]  ksys_write+0x12a/0x250
[  227.813700][ T8370]  ? __pfx_ksys_write+0x10/0x10
[  227.813721][ T8370]  do_syscall_64+0x106/0xf80
[  227.813736][ T8370]  ? clear_bhb_loop+0x40/0x90
[  227.813754][ T8370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.813770][ T8370] RIP: 0033:0x7fd74979c819
[  227.813783][ T8370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.813798][ T8370] RSP: 002b:00007fd74a5ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  227.813813][ T8370] RAX: ffffffffffffffda RBX: 00007fd749a16090 RCX: 00007fd74979c819
[  227.813822][ T8370] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  227.813831][ T8370] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  227.813840][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.813848][ T8370] R13: 00007fd749a16128 R14: 00007fd749a16090 R15: 00007fff09c4f708
[  227.813868][ T8370]  </TASK>
[  228.114573][ T8373] netlink: 330 bytes leftover after parsing attributes in process `syz.4.460'.
[  228.666901][ T8324] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  228.813944][ T8324] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  228.857489][ T8324] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  228.905069][ T8324] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  229.576328][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.625658][ T5830] Bluetooth: hci6: command tx timeout
[  229.696524][ T8324] 8021q: adding VLAN 0 to HW filter on device team0
[  229.737310][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.744549][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.047449][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.054669][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.705689][ T5830] Bluetooth: hci6: command tx timeout
[  231.736284][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.212009][ T8324] veth0_vlan: entered promiscuous mode
[  233.392954][ T8324] veth1_vlan: entered promiscuous mode
[  233.532115][ T8324] veth0_macvtap: entered promiscuous mode
[  233.579784][ T8324] veth1_macvtap: entered promiscuous mode
[  233.692974][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.798023][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.847334][   T63] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.083766][   T63] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.100269][   T63] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.109018][   T63] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.507775][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.548875][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.754652][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.840449][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.858501][ T8457] sctp: [Deprecated]: syz.5.472 (pid 8457) Use of int in maxseg socket option.
[  234.858501][ T8457] Use struct sctp_assoc_value instead
[  240.323182][ T8524] netlink: 342 bytes leftover after parsing attributes in process `syz.6.487'.
[  240.571195][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  242.598818][   T29] Process accounting resumed
[  244.285604][ T8587] FAULT_INJECTION: forcing a failure.
[  244.285604][ T8587] name failslab, interval 1, probability 0, space 0, times 0
[  244.339014][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT(full) 
[  244.339053][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  244.339069][ T8587] Call Trace:
[  244.339078][ T8587]  <TASK>
[  244.339089][ T8587]  dump_stack_lvl+0x100/0x190
[  244.339138][ T8587]  should_fail_ex.cold+0x5/0xa
[  244.339172][ T8587]  should_failslab+0xc2/0x120
[  244.339204][ T8587]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  244.339233][ T8587]  ? nf_log_net_init+0x9f/0x450
[  244.339269][ T8587]  ? __pfx_nf_log_net_init+0x10/0x10
[  244.339299][ T8587]  kmemdup_noprof+0x29/0x60
[  244.339328][ T8587]  nf_log_net_init+0x9f/0x450
[  244.339360][ T8587]  ? __pfx_nf_log_net_init+0x10/0x10
[  244.339387][ T8587]  ops_init+0x1e2/0x5f0
[  244.339415][ T8587]  setup_net+0x118/0x3a0
[  244.339444][ T8587]  ? __pfx_setup_net+0x10/0x10
[  244.339469][ T8587]  ? lockdep_init_map_type+0x5c/0x250
[  244.339509][ T8587]  ? mutex_init_lockep+0x110/0x150
[  244.339555][ T8587]  copy_net_ns+0x46f/0x7c0
[  244.339590][ T8587]  create_new_namespaces+0x3ea/0xac0
[  244.339629][ T8587]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  244.339664][ T8587]  ksys_unshare+0x473/0xad0
[  244.339703][ T8587]  ? __pfx_ksys_unshare+0x10/0x10
[  244.339754][ T8587]  __x64_sys_unshare+0x31/0x40
[  244.339798][ T8587]  do_syscall_64+0x106/0xf80
[  244.339827][ T8587]  ? clear_bhb_loop+0x40/0x90
[  244.339864][ T8587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.339894][ T8587] RIP: 0033:0x7fd74979c819
[  244.339918][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.339946][ T8587] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  244.339973][ T8587] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  244.339991][ T8587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  244.340006][ T8587] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  244.340022][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.340037][ T8587] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  244.340073][ T8587]  </TASK>
[  245.476418][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.500'.
[  245.516471][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  248.384232][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'.
[  253.955553][ T8691] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  254.289272][ T8690] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  254.460465][ T8688] FAULT_INJECTION: forcing a failure.
[  254.460465][ T8688] name fail_futex, interval 1, probability 0, space 0, times 0
[  254.510577][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.4.520 Not tainted syzkaller #0 PREEMPT(full) 
[  254.510616][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  254.510634][ T8688] Call Trace:
[  254.510643][ T8688]  <TASK>
[  254.510654][ T8688]  dump_stack_lvl+0x100/0x190
[  254.510704][ T8688]  should_fail_ex.cold+0x5/0xa
[  254.510741][ T8688]  get_futex_key+0x1d2/0x1620
[  254.510782][ T8688]  ? __pfx_get_futex_key+0x10/0x10
[  254.510820][ T8688]  ? update_se+0x94/0x760
[  254.510860][ T8688]  futex_wait_setup+0x83/0x510
[  254.510917][ T8688]  __futex_wait+0x19f/0x300
[  254.510965][ T8688]  ? __pfx___futex_wait+0x10/0x10
[  254.511009][ T8688]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  254.511063][ T8688]  ? lockdep_hardirqs_on+0x78/0x100
[  254.511097][ T8688]  ? __pfx_futex_wake_mark+0x10/0x10
[  254.511150][ T8688]  ? find_held_lock+0x2b/0x80
[  254.511178][ T8688]  ? futex_wake+0x456/0x530
[  254.511232][ T8688]  futex_wait+0xed/0x380
[  254.511278][ T8688]  ? __pfx_futex_wait+0x10/0x10
[  254.511344][ T8688]  do_futex+0x1ef/0x350
[  254.511384][ T8688]  ? __pfx_do_futex+0x10/0x10
[  254.511420][ T8688]  ? __fget_files+0x215/0x3d0
[  254.511459][ T8688]  __x64_sys_futex+0x34f/0x4d0
[  254.511504][ T8688]  ? __pfx___x64_sys_futex+0x10/0x10
[  254.511545][ T8688]  ? __sys_setsockopt+0x139/0x190
[  254.511600][ T8688]  do_syscall_64+0x106/0xf80
[  254.511640][ T8688]  ? clear_bhb_loop+0x40/0x90
[  254.511678][ T8688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.511709][ T8688] RIP: 0033:0x7fb0f419c819
[  254.511734][ T8688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.511763][ T8688] RSP: 002b:00007fb0f50620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  254.511790][ T8688] RAX: ffffffffffffffda RBX: 00007fb0f4416098 RCX: 00007fb0f419c819
[  254.511810][ T8688] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb0f4416098
[  254.511828][ T8688] RBP: 00007fb0f4416090 R08: 0000000000000000 R09: 0000000000000000
[  254.511847][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.511864][ T8688] R13: 00007fb0f4416128 R14: 00007fff2a775b20 R15: 00007fff2a775c08
[  254.511904][ T8688]  </TASK>
[  255.580854][ T8700] netlink: 342 bytes leftover after parsing attributes in process `syz.3.524'.
[  255.783854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.790626][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  256.583100][ T8708] FAULT_INJECTION: forcing a failure.
[  256.583100][ T8708] name failslab, interval 1, probability 0, space 0, times 0
[  256.624791][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.4.526 Not tainted syzkaller #0 PREEMPT(full) 
[  256.624831][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  256.624849][ T8708] Call Trace:
[  256.624859][ T8708]  <TASK>
[  256.624869][ T8708]  dump_stack_lvl+0x100/0x190
[  256.624918][ T8708]  should_fail_ex.cold+0x5/0xa
[  256.624952][ T8708]  should_failslab+0xc2/0x120
[  256.624985][ T8708]  __kmalloc_cache_noprof+0x7a/0x6f0
[  256.625023][ T8708]  ? __do_sys_fanotify_init+0x5cf/0xe50
[  256.625065][ T8708]  ? get_mem_cgroup_from_mm+0x88/0x600
[  256.625105][ T8708]  ? get_mem_cgroup_from_mm+0x132/0x600
[  256.625152][ T8708]  __do_sys_fanotify_init+0x5cf/0xe50
[  256.625203][ T8708]  do_syscall_64+0x106/0xf80
[  256.625232][ T8708]  ? clear_bhb_loop+0x40/0x90
[  256.625268][ T8708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.625297][ T8708] RIP: 0033:0x7fb0f419c819
[  256.625320][ T8708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.625347][ T8708] RSP: 002b:00007fb0f5083028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  256.625374][ T8708] RAX: ffffffffffffffda RBX: 00007fb0f4415fa0 RCX: 00007fb0f419c819
[  256.625392][ T8708] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000602
[  256.625409][ T8708] RBP: 00007fb0f4232c91 R08: 0000000000000000 R09: 0000000000000000
[  256.625426][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.625442][ T8708] R13: 00007fb0f4416038 R14: 00007fb0f4415fa0 R15: 00007fff2a775c08
[  256.625478][ T8708]  </TASK>
[  257.001231][ T8713] FAULT_INJECTION: forcing a failure.
[  257.001231][ T8713] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  257.038010][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) 
[  257.038032][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.038041][ T8713] Call Trace:
[  257.038047][ T8713]  <TASK>
[  257.038052][ T8713]  dump_stack_lvl+0x100/0x190
[  257.038080][ T8713]  should_fail_ex.cold+0x5/0xa
[  257.038095][ T8713]  ? prepare_alloc_pages+0x16d/0x5f0
[  257.038115][ T8713]  should_fail_alloc_page+0xeb/0x140
[  257.038133][ T8713]  prepare_alloc_pages+0x1f0/0x5f0
[  257.038154][ T8713]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  257.038178][ T8713]  ? __pfx_stack_trace_save+0x10/0x10
[  257.038196][ T8713]  ? stack_depot_save_flags+0x27/0x9d0
[  257.038216][ T8713]  ? kasan_save_stack+0x3f/0x50
[  257.038229][ T8713]  ? kasan_save_stack+0x30/0x50
[  257.038241][ T8713]  ? kasan_save_track+0x14/0x30
[  257.038256][ T8713]  ? kasan_save_stack+0x3f/0x50
[  257.038271][ T8713]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  257.038297][ T8713]  ? __lock_acquire+0x4a5/0x2630
[  257.038321][ T8713]  ? __lock_acquire+0x4a5/0x2630
[  257.038343][ T8713]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  257.038360][ T8713]  ? policy_nodemask+0xed/0x4f0
[  257.038378][ T8713]  alloc_pages_mpol+0x1fb/0x550
[  257.038395][ T8713]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  257.038411][ T8713]  ? __anon_vma_prepare+0x2db/0x5e0
[  257.038432][ T8713]  ? __anon_vma_prepare+0x2db/0x5e0
[  257.038455][ T8713]  folio_alloc_mpol_noprof+0x36/0x340
[  257.038475][ T8713]  vma_alloc_folio_noprof+0xed/0x1d0
[  257.038494][ T8713]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  257.038513][ T8713]  ? __anon_vma_prepare+0x2e2/0x5e0
[  257.038538][ T8713]  do_anonymous_page+0xb3a/0x1fb0
[  257.038565][ T8713]  ? __pmd_alloc+0x3fb/0x950
[  257.038584][ T8713]  __handle_mm_fault+0x1d48/0x2b60
[  257.038608][ T8713]  ? mt_find+0x45e/0x8e0
[  257.038626][ T8713]  ? __pfx___handle_mm_fault+0x10/0x10
[  257.038645][ T8713]  ? __pfx_mt_find+0x10/0x10
[  257.038676][ T8713]  handle_mm_fault+0x36d/0xa20
[  257.038700][ T8713]  __get_user_pages+0xf9c/0x34d0
[  257.038725][ T8713]  ? __pfx___get_user_pages+0x10/0x10
[  257.038748][ T8713]  populate_vma_page_range+0x267/0x3f0
[  257.038768][ T8713]  ? __pfx_populate_vma_page_range+0x10/0x10
[  257.038786][ T8713]  ? __pfx_find_vma_intersection+0x10/0x10
[  257.038810][ T8713]  ? do_mmap+0x93f/0x12f0
[  257.038829][ T8713]  __mm_populate+0x107/0x3a0
[  257.038848][ T8713]  ? __pfx___mm_populate+0x10/0x10
[  257.038868][ T8713]  ? up_write+0x290/0x4f0
[  257.038891][ T8713]  vm_mmap_pgoff+0x37f/0x470
[  257.038911][ T8713]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  257.038930][ T8713]  ? __fget_files+0x215/0x3d0
[  257.038946][ T8713]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  257.038966][ T8713]  ksys_mmap_pgoff+0xe1/0x650
[  257.038984][ T8713]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  257.039000][ T8713]  ? fput+0x79/0x100
[  257.039017][ T8713]  ? ksys_write+0x1ac/0x250
[  257.039031][ T8713]  ? __pfx_ksys_write+0x10/0x10
[  257.039047][ T8713]  __x64_sys_mmap+0x125/0x190
[  257.039072][ T8713]  do_syscall_64+0x106/0xf80
[  257.039086][ T8713]  ? clear_bhb_loop+0x40/0x90
[  257.039105][ T8713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.039120][ T8713] RIP: 0033:0x7fd74979c819
[  257.039133][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.039147][ T8713] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  257.039162][ T8713] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  257.039171][ T8713] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  257.039180][ T8713] RBP: 00007fd74a60b090 R08: 0000000000000002 R09: 0000000000008000
[  257.039188][ T8713] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001
[  257.039197][ T8713] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  257.039216][ T8713]  </TASK>
[  257.570356][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  259.176541][ T8728] Invalid ELF header magic: != ELF
[  260.409426][ T5822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  260.421026][ T5822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  260.450332][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  260.459558][ T5822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  260.467976][ T5822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  261.965565][ T8739] chnl_net:caif_netlink_parms(): no params data found
[  262.350110][ T5826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  262.359503][ T5826] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  262.368104][ T5826] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  262.375795][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  262.385527][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  262.500360][ T5826] Bluetooth: hci7: command tx timeout
[  262.583111][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.615427][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.635822][ T8739] bridge_slave_0: entered allmulticast mode
[  262.659304][ T8739] bridge_slave_0: entered promiscuous mode
[  262.697304][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.729086][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.760697][ T8739] bridge_slave_1: entered allmulticast mode
[  262.800411][ T8739] bridge_slave_1: entered promiscuous mode
[  262.953607][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.984516][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.337105][ T8739] team0: Port device team_slave_0 added
[  263.362888][ T8739] team0: Port device team_slave_1 added
[  263.530394][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.570340][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.621105][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.766310][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.799249][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.902690][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.202007][ T8739] hsr_slave_0: entered promiscuous mode
[  264.208457][ T8739] hsr_slave_1: entered promiscuous mode
[  264.245129][ T8739] debugfs: 'hsr0' already exists in 'hsr'
[  264.260466][ T5830] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  264.300930][ T8739] Cannot create hsr debugfs directory
[  264.420878][ T5830] Bluetooth: hci9: command tx timeout
[  264.430577][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  264.580446][ T5830] Bluetooth: hci7: command tx timeout
[  264.772747][ T8739] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  264.858027][ T8739] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  264.917092][ T8739] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  264.956119][ T8760] chnl_net:caif_netlink_parms(): no params data found
[  265.195593][ T8739] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  265.500424][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.510077][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.590538][ T8760] bridge_slave_0: entered allmulticast mode
[  265.632696][ T8760] bridge_slave_0: entered promiscuous mode
[  265.651697][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.662547][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.669881][ T8760] bridge_slave_1: entered allmulticast mode
[  265.684951][ T8760] bridge_slave_1: entered promiscuous mode
[  265.917030][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.933328][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.020006][ T8760] team0: Port device team_slave_0 added
[  266.035535][ T8760] team0: Port device team_slave_1 added
[  266.189595][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.196796][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.224490][ T8760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.247858][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.500583][ T5830] Bluetooth: hci9: command tx timeout
[  266.510431][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.560943][ T8760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.660652][ T5830] Bluetooth: hci7: command tx timeout
[  267.017361][ T5830] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5
[  267.086793][ T8760] hsr_slave_0: entered promiscuous mode
[  267.160887][ T8760] hsr_slave_1: entered promiscuous mode
[  267.167399][ T8760] debugfs: 'hsr0' already exists in 'hsr'
[  267.189168][ T8760] Cannot create hsr debugfs directory
[  267.212150][ T8816] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(65538.0.4294967291), cmd(3)
[  267.296344][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.488951][ T8739] 8021q: adding VLAN 0 to HW filter on device team0
[  267.650682][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.657886][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.794594][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.801797][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.189295][ T8739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.424453][ T8760] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  268.531221][ T8760] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  268.577706][ T8760] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  268.591122][ T5830] Bluetooth: hci9: command tx timeout
[  268.734981][ T8760] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  268.742564][ T5826] Bluetooth: hci7: command tx timeout
[  268.785877][ T8739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.647996][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.206035][ T8760] 8021q: adding VLAN 0 to HW filter on device team0
[  270.276073][ T8739] veth0_vlan: entered promiscuous mode
[  270.326013][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.333257][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.388101][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.395288][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.518721][ T8739] veth1_vlan: entered promiscuous mode
[  270.661662][ T5826] Bluetooth: hci9: command tx timeout
[  270.706192][ T8739] veth0_macvtap: entered promiscuous mode
[  270.753981][ T8739] veth1_macvtap: entered promiscuous mode
[  270.850087][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.877064][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.924369][ T1076] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.934040][ T1076] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.987466][ T1076] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.012117][ T1076] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.278724][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.289738][ T8870] FAULT_INJECTION: forcing a failure.
[  271.289738][ T8870] name failslab, interval 1, probability 0, space 0, times 0
[  271.318212][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.338787][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.3.553 Not tainted syzkaller #0 PREEMPT(full) 
[  271.338830][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  271.338847][ T8870] Call Trace:
[  271.338857][ T8870]  <TASK>
[  271.338868][ T8870]  dump_stack_lvl+0x100/0x190
[  271.338920][ T8870]  should_fail_ex.cold+0x5/0xa
[  271.338957][ T8870]  should_failslab+0xc2/0x120
[  271.338991][ T8870]  __kmalloc_cache_noprof+0x7a/0x6f0
[  271.339030][ T8870]  ? vidtv_psi_sdt_service_init+0x52/0x200
[  271.339085][ T8870]  vidtv_psi_sdt_service_init+0x52/0x200
[  271.339133][ T8870]  vidtv_channel_si_init+0x5cf/0x18d0
[  271.339193][ T8870]  vidtv_mux_init+0x526/0xbf0
[  271.339227][ T8870]  vidtv_start_feed+0x33e/0x4c0
[  271.339265][ T8870]  ? __pfx_vidtv_start_feed+0x10/0x10
[  271.339304][ T8870]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  271.339351][ T8870]  ? mark_held_locks+0x40/0x70
[  271.339397][ T8870]  ? __pfx_vidtv_start_feed+0x10/0x10
[  271.339470][ T8870]  dmx_ts_feed_start_filtering+0xf6/0x220
[  271.339518][ T8870]  dvb_dmxdev_start_feed+0x273/0x3f0
[  271.339559][ T8870]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  271.339601][ T8870]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  271.339642][ T8870]  dvb_demux_do_ioctl+0xe64/0x1200
[  271.339691][ T8870]  dvb_usercopy+0x167/0x340
[  271.339722][ T8870]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  271.339761][ T8870]  ? __pfx_dvb_usercopy+0x10/0x10
[  271.339809][ T8870]  ? __fget_files+0x21f/0x3d0
[  271.339847][ T8870]  dvb_demux_ioctl+0x29/0x40
[  271.339878][ T8870]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  271.339912][ T8870]  __x64_sys_ioctl+0x18e/0x210
[  271.339959][ T8870]  do_syscall_64+0x106/0xf80
[  271.339988][ T8870]  ? clear_bhb_loop+0x40/0x90
[  271.340025][ T8870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.340056][ T8870] RIP: 0033:0x7fd74979c819
[  271.340081][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.340110][ T8870] RSP: 002b:00007fd74a60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  271.340138][ T8870] RAX: ffffffffffffffda RBX: 00007fd749a15fa0 RCX: 00007fd74979c819
[  271.340158][ T8870] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002
[  271.340178][ T8870] RBP: 00007fd749832c91 R08: 0000000000000000 R09: 0000000000000000
[  271.340195][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.340210][ T8870] R13: 00007fd749a16038 R14: 00007fd749a15fa0 R15: 00007fff09c4f708
[  271.340247][ T8870]  </TASK>
[  271.420363][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.712690][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.805056][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.137924][ T8904] FAULT_INJECTION: forcing a failure.
[  273.137924][ T8904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.152111][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.4.558 Not tainted syzkaller #0 PREEMPT(full) 
[  273.152136][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  273.152145][ T8904] Call Trace:
[  273.152150][ T8904]  <TASK>
[  273.152157][ T8904]  dump_stack_lvl+0x100/0x190
[  273.152186][ T8904]  should_fail_ex.cold+0x5/0xa
[  273.152205][ T8904]  _copy_from_user+0x2e/0xd0
[  273.152225][ T8904]  snd_pcm_oss_write2+0x1c2/0x400
[  273.152256][ T8904]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  273.152281][ T8904]  snd_pcm_oss_write+0x729/0xa30
[  273.152303][ T8904]  ? security_file_permission+0x76/0x210
[  273.152327][ T8904]  vfs_write+0x2aa/0x1070
[  273.152344][ T8904]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  273.152365][ T8904]  ? __pfx_vfs_write+0x10/0x10
[  273.152378][ T8904]  ? find_held_lock+0x2b/0x80
[  273.152392][ T8904]  ? __fget_files+0x215/0x3d0
[  273.152408][ T8904]  ? __fget_files+0x215/0x3d0
[  273.152425][ T8904]  ? __fget_files+0x21f/0x3d0
[  273.152446][ T8904]  ksys_write+0x12a/0x250
[  273.152460][ T8904]  ? __pfx_ksys_write+0x10/0x10
[  273.152480][ T8904]  do_syscall_64+0x106/0xf80
[  273.152495][ T8904]  ? clear_bhb_loop+0x40/0x90
[  273.152513][ T8904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.152528][ T8904] RIP: 0033:0x7fb0f419c819
[  273.152542][ T8904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.152556][ T8904] RSP: 002b:00007fb0f5041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  273.152570][ T8904] RAX: ffffffffffffffda RBX: 00007fb0f4416180 RCX: 00007fb0f419c819
[  273.152580][ T8904] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  273.152588][ T8904] RBP: 00007fb0f4232c91 R08: 0000000000000000 R09: 0000000000000000
[  273.152597][ T8904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.152605][ T8904] R13: 00007fb0f4416218 R14: 00007fb0f4416180 R15: 00007fff2a775c08
[  273.152625][ T8904]  </TASK>
[  273.531437][ T8760] veth0_vlan: entered promiscuous mode
[  273.733181][ T8760] veth1_vlan: entered promiscuous mode
[  274.387961][ T8760] veth0_macvtap: entered promiscuous mode
[  274.421551][ T8760] veth1_macvtap: entered promiscuous mode
[  274.474316][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.499995][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.514519][  T338] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.514582][  T338] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.514608][  T338] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.514633][  T338] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.055041][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.066877][ T8915] kexec: Could not allocate control_code_buffer
[  275.086340][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.260320][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.293149][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.434277][ T8925] FAULT_INJECTION: forcing a failure.
[  275.434277][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.485652][ T8925] CPU: 0 UID: 0 PID: 8925 Comm: syz.7.564 Not tainted syzkaller #0 PREEMPT(full) 
[  275.485689][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  275.485703][ T8925] Call Trace:
[  275.485711][ T8925]  <TASK>
[  275.485721][ T8925]  dump_stack_lvl+0x100/0x190
[  275.485769][ T8925]  should_fail_ex.cold+0x5/0xa
[  275.485803][ T8925]  _copy_to_user+0x32/0xd0
[  275.485840][ T8925]  simple_read_from_buffer+0xcb/0x170
[  275.485886][ T8925]  proc_fail_nth_read+0x1af/0x230
[  275.485924][ T8925]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.485962][ T8925]  ? rw_verify_area+0xce/0x6d0
[  275.486039][ T8925]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.486074][ T8925]  vfs_read+0x1e4/0xb30
[  275.486105][ T8925]  ? __pfx_vfs_read+0x10/0x10
[  275.486129][ T8925]  ? __fget_files+0x215/0x3d0
[  275.486160][ T8925]  ? __fget_files+0x21f/0x3d0
[  275.486194][ T8925]  ksys_read+0x12a/0x250
[  275.486219][ T8925]  ? __pfx_ksys_read+0x10/0x10
[  275.486252][ T8925]  do_syscall_64+0x106/0xf80
[  275.486281][ T8925]  ? clear_bhb_loop+0x40/0x90
[  275.486315][ T8925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.486342][ T8925] RIP: 0033:0x7f1bbb95d04e
[  275.486364][ T8925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  275.486390][ T8925] RSP: 002b:00007f1bbc823fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  275.486415][ T8925] RAX: ffffffffffffffda RBX: 00007f1bbc8246c0 RCX: 00007f1bbb95d04e
[  275.486433][ T8925] RDX: 000000000000000f RSI: 00007f1bbc8240a0 RDI: 0000000000000003
[  275.486450][ T8925] RBP: 00007f1bbc824090 R08: 0000000000000000 R09: 0000000000000000
[  275.486466][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.486482][ T8925] R13: 00007f1bbbc16038 R14: 00007f1bbbc15fa0 R15: 00007ffc33034008
[  275.486516][ T8925]  </TASK>
[  275.726975][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.536'.
[  275.736097][ T8930] macvlan1: entered promiscuous mode
[  275.741690][ T8930] macvlan1: entered allmulticast mode
[  275.747092][ T8930] veth1_vlan: entered allmulticast mode
[  275.861917][ T8928] netlink: 84 bytes leftover after parsing attributes in process `syz.3.566'.
[  279.933782][ T8989] FAULT_INJECTION: forcing a failure.
[  279.933782][ T8989] name failslab, interval 1, probability 0, space 0, times 0
[  279.974415][ T8988] FAULT_INJECTION: forcing a failure.
[  279.974415][ T8988] name failslab, interval 1, probability 0, space 0, times 0
[  279.992243][ T8989] CPU: 1 UID: 0 PID: 8989 Comm: syz.4.576 Not tainted syzkaller #0 PREEMPT(full) 
[  279.992279][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  279.992294][ T8989] Call Trace:
[  279.992302][ T8989]  <TASK>
[  279.992312][ T8989]  dump_stack_lvl+0x100/0x190
[  279.992355][ T8989]  should_fail_ex.cold+0x5/0xa
[  279.992385][ T8989]  ? tomoyo_encode2+0xfb/0x3c0
[  279.992419][ T8989]  should_failslab+0xc2/0x120
[  279.992447][ T8989]  __kmalloc_noprof+0xe0/0x850
[  279.992484][ T8989]  ? d_absolute_path+0x136/0x1b0
[  279.992525][ T8989]  tomoyo_encode2+0xfb/0x3c0
[  279.992565][ T8989]  tomoyo_encode+0x29/0x50
[  279.992597][ T8989]  tomoyo_realpath_from_path+0x18c/0x690
[  279.992649][ T8989]  tomoyo_check_open_permission+0x2af/0x3c0
[  279.992682][ T8989]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  279.992748][ T8989]  ? do_raw_spin_lock+0x128/0x260
[  279.992788][ T8989]  ? path_get+0x61/0x80
[  279.992820][ T8989]  tomoyo_file_open+0x6b/0x90
[  279.992846][ T8989]  security_file_open+0xb5/0x1e0
[  279.992880][ T8989]  do_dentry_open+0x5aa/0x1660
[  279.992910][ T8989]  ? security_inode_permission+0xbf/0x250
[  279.992952][ T8989]  vfs_open+0x82/0x3f0
[  279.992990][ T8989]  path_openat+0x208c/0x31a0
[  279.993029][ T8989]  ? __pfx_path_openat+0x10/0x10
[  279.993071][ T8989]  do_file_open+0x20e/0x430
[  279.993101][ T8989]  ? __pfx_do_file_open+0x10/0x10
[  279.993154][ T8989]  ? alloc_fd+0x476/0x790
[  279.993184][ T8989]  ? do_getname+0x191/0x390
[  279.993220][ T8989]  do_sys_openat2+0x10d/0x1e0
[  279.993254][ T8989]  ? __pfx_do_sys_openat2+0x10/0x10
[  279.993285][ T8989]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  279.993318][ T8989]  ? __fget_files+0x21f/0x3d0
[  279.993353][ T8989]  __x64_sys_openat+0x12d/0x210
[  279.993388][ T8989]  ? __pfx___x64_sys_openat+0x10/0x10
[  279.993425][ T8989]  ? ksys_write+0x1ac/0x250
[  279.993463][ T8989]  do_syscall_64+0x106/0xf80
[  279.993488][ T8989]  ? clear_bhb_loop+0x40/0x90
[  279.993519][ T8989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.993545][ T8989] RIP: 0033:0x7fb0f419c819
[  279.993566][ T8989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.993590][ T8989] RSP: 002b:00007fb0f5083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  279.993648][ T8989] RAX: ffffffffffffffda RBX: 00007fb0f4415fa0 RCX: 00007fb0f419c819
[  279.993665][ T8989] RDX: 0000000000141200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  279.993681][ T8989] RBP: 00007fb0f5083090 R08: 0000000000000000 R09: 0000000000000000
[  279.993696][ T8989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.993710][ T8989] R13: 00007fb0f4416038 R14: 00007fb0f4415fa0 R15: 00007fff2a775c08
[  279.993746][ T8989]  </TASK>
[  279.993813][ T8989] ERROR: Out of memory at tomoyo_realpath_from_path.
[  280.044216][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.7.577 Not tainted syzkaller #0 PREEMPT(full) 
[  280.044249][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  280.044264][ T8988] Call Trace:
[  280.044272][ T8988]  <TASK>
[  280.044281][ T8988]  dump_stack_lvl+0x100/0x190
[  280.044326][ T8988]  should_fail_ex.cold+0x5/0xa
[  280.044360][ T8988]  should_failslab+0xc2/0x120
[  280.044389][ T8988]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  280.044428][ T8988]  ? skb_clone+0x190/0x400
[  280.044476][ T8988]  skb_clone+0x190/0x400
[  280.044524][ T8988]  netlink_deliver_tap+0xaed/0xcc0
[  280.044576][ T8988]  netlink_unicast+0x650/0x870
[  280.044610][ T8988]  ? __pfx_netlink_unicast+0x10/0x10
[  280.044652][ T8988]  netlink_sendmsg+0x8b0/0xda0
[  280.044687][ T8988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.044714][ T8988]  ? __import_iovec+0x1d2/0x640
[  280.044752][ T8988]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  280.044788][ T8988]  ____sys_sendmsg+0x9e1/0xb70
[  280.044818][ T8988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.044850][ T8988]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.044899][ T8988]  ___sys_sendmsg+0x190/0x1e0
[  280.044936][ T8988]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.045013][ T8988]  __sys_sendmsg+0x170/0x220
[  280.045055][ T8988]  ? __pfx___sys_sendmsg+0x10/0x10
[  280.045120][ T8988]  do_syscall_64+0x106/0xf80
[  280.045146][ T8988]  ? clear_bhb_loop+0x40/0x90
[  280.045179][ T8988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.045207][ T8988] RIP: 0033:0x7f1bbb99c819
[  280.045230][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.045256][ T8988] RSP: 002b:00007f1bbc824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.045282][ T8988] RAX: ffffffffffffffda RBX: 00007f1bbbc15fa0 RCX: 00007f1bbb99c819
[  280.045300][ T8988] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003
[  280.045318][ T8988] RBP: 00007f1bbc824090 R08: 0000000000000000 R09: 0000000000000000
[  280.045334][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.045351][ T8988] R13: 00007f1bbbc16038 R14: 00007f1bbbc15fa0 R15: 00007ffc33034008
[  280.045387][ T8988]  </TASK>
[  284.141884][ T9002] can: request_module (can-proto-3) failed.
[  285.563751][ T9057] FAULT_INJECTION: forcing a failure.
[  285.563751][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.596555][ T9057] CPU: 1 UID: 0 PID: 9057 Comm: syz.8.591 Not tainted syzkaller #0 PREEMPT(full) 
[  285.596594][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  285.596611][ T9057] Call Trace:
[  285.596620][ T9057]  <TASK>
[  285.596630][ T9057]  dump_stack_lvl+0x100/0x190
[  285.596679][ T9057]  should_fail_ex.cold+0x5/0xa
[  285.596714][ T9057]  _copy_from_user+0x2e/0xd0
[  285.596754][ T9057]  snd_pcm_oss_write2+0x1c2/0x400
[  285.596795][ T9057]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  285.596840][ T9057]  snd_pcm_oss_write+0x729/0xa30
[  285.596878][ T9057]  ? security_file_permission+0x76/0x210
[  285.596919][ T9057]  vfs_write+0x2aa/0x1070
[  285.596946][ T9057]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  285.596988][ T9057]  ? __pfx_vfs_write+0x10/0x10
[  285.597019][ T9057]  ? find_held_lock+0x2b/0x80
[  285.597048][ T9057]  ? __fget_files+0x215/0x3d0
[  285.597076][ T9057]  ? __fget_files+0x215/0x3d0
[  285.597111][ T9057]  ? __fget_files+0x21f/0x3d0
[  285.597149][ T9057]  ksys_write+0x12a/0x250
[  285.597177][ T9057]  ? __pfx_ksys_write+0x10/0x10
[  285.597215][ T9057]  do_syscall_64+0x106/0xf80
[  285.597241][ T9057]  ? clear_bhb_loop+0x40/0x90
[  285.597275][ T9057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.597302][ T9057] RIP: 0033:0x7faff6d9c819
[  285.597324][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.597350][ T9057] RSP: 002b:00007faff4fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  285.597376][ T9057] RAX: ffffffffffffffda RBX: 00007faff7016180 RCX: 00007faff6d9c819
[  285.597394][ T9057] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  285.597412][ T9057] RBP: 00007faff6e32c91 R08: 0000000000000000 R09: 0000000000000000
[  285.597427][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.597444][ T9057] R13: 00007faff7016218 R14: 00007faff7016180 R15: 00007ffdb4a0aa38
[  285.597481][ T9057]  </TASK>
[  291.969661][ T9132] mkiss: ax0: crc mode is auto.
[  292.619705][   T30] audit: type=1800 audit(1775239728.526:3): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.609" name="dbroot" dev="configfs" ino=86048 res=0 errno=0
[  293.871097][ T9157] FAULT_INJECTION: forcing a failure.
[  293.871097][ T9157] name fail_futex, interval 1, probability 0, space 0, times 0
[  293.884702][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.8.614 Not tainted syzkaller #0 PREEMPT(full) 
[  293.884739][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  293.884754][ T9157] Call Trace:
[  293.884763][ T9157]  <TASK>
[  293.884773][ T9157]  dump_stack_lvl+0x100/0x190
[  293.884819][ T9157]  should_fail_ex.cold+0x5/0xa
[  293.884853][ T9157]  get_futex_key+0x295/0x1620
[  293.884891][ T9157]  ? __pfx_get_futex_key+0x10/0x10
[  293.884930][ T9157]  ? lock_acquire+0x1cf/0x380
[  293.884978][ T9157]  futex_wake+0xea/0x530
[  293.885023][ T9157]  ? __pfx_futex_wake+0x10/0x10
[  293.885063][ T9157]  ? exit_mm_release+0x19/0x30
[  293.885105][ T9157]  do_futex+0x32b/0x350
[  293.885137][ T9157]  ? __pfx_do_futex+0x10/0x10
[  293.885167][ T9157]  ? __might_fault+0xc5/0x140
[  293.885208][ T9157]  mm_release+0x24a/0x2f0
[  293.885235][ T9157]  do_exit+0x704/0x2b60
[  293.885273][ T9157]  ? __pfx_do_exit+0x10/0x10
[  293.885308][ T9157]  ? do_raw_spin_lock+0x128/0x260
[  293.885346][ T9157]  ? find_held_lock+0x2b/0x80
[  293.885370][ T9157]  ? get_signal+0x7e0/0x21e0
[  293.885401][ T9157]  do_group_exit+0xd5/0x2a0
[  293.885439][ T9157]  get_signal+0x1ec7/0x21e0
[  293.885480][ T9157]  ? __pfx_get_signal+0x10/0x10
[  293.885510][ T9157]  ? do_futex+0x192/0x350
[  293.885548][ T9157]  arch_do_signal_or_restart+0x91/0x770
[  293.885584][ T9157]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  293.885627][ T9157]  ? __pfx___x64_sys_futex+0x10/0x10
[  293.885670][ T9157]  exit_to_user_mode_loop+0x86/0x4a0
[  293.885708][ T9157]  do_syscall_64+0x668/0xf80
[  293.885734][ T9157]  ? clear_bhb_loop+0x40/0x90
[  293.885767][ T9157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.885794][ T9157] RIP: 0033:0x7faff6d9c819
[  293.885817][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.885842][ T9157] RSP: 002b:00007faff4fee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  293.885866][ T9157] RAX: fffffffffffffe00 RBX: 00007faff7015fa8 RCX: 00007faff6d9c819
[  293.885884][ T9157] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faff7015fa8
[  293.885906][ T9157] RBP: 00007faff7015fa0 R08: 0000000000000000 R09: 0000000000000000
[  293.885923][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.885938][ T9157] R13: 00007faff7016038 R14: 00007ffdb4a0a950 R15: 00007ffdb4a0aa38
[  293.885969][ T9157]  </TASK>
[  295.119611][ T9162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  295.533738][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  295.547416][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  295.556645][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  295.566899][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  295.574763][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  296.464753][ T9188] FAULT_INJECTION: forcing a failure.
[  296.464753][ T9188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.500382][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.8.620 Not tainted syzkaller #0 PREEMPT(full) 
[  296.500416][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  296.500426][ T9188] Call Trace:
[  296.500431][ T9188]  <TASK>
[  296.500438][ T9188]  dump_stack_lvl+0x100/0x190
[  296.500465][ T9188]  should_fail_ex.cold+0x5/0xa
[  296.500484][ T9188]  _copy_to_user+0x32/0xd0
[  296.500505][ T9188]  simple_read_from_buffer+0xcb/0x170
[  296.500531][ T9188]  proc_fail_nth_read+0x1af/0x230
[  296.500551][ T9188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  296.500571][ T9188]  ? rw_verify_area+0xce/0x6d0
[  296.500593][ T9188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  296.500612][ T9188]  vfs_read+0x1e4/0xb30
[  296.500629][ T9188]  ? __pfx_vfs_read+0x10/0x10
[  296.500642][ T9188]  ? __fget_files+0x215/0x3d0
[  296.500661][ T9188]  ? __fget_files+0x21f/0x3d0
[  296.500681][ T9188]  ksys_read+0x12a/0x250
[  296.500695][ T9188]  ? __pfx_ksys_read+0x10/0x10
[  296.500721][ T9188]  do_syscall_64+0x106/0xf80
[  296.500736][ T9188]  ? clear_bhb_loop+0x40/0x90
[  296.500754][ T9188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.500769][ T9188] RIP: 0033:0x7faff6d5d04e
[  296.500782][ T9188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  296.500796][ T9188] RSP: 002b:00007faff4fedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  296.500810][ T9188] RAX: ffffffffffffffda RBX: 00007faff4fee6c0 RCX: 00007faff6d5d04e
[  296.500820][ T9188] RDX: 000000000000000f RSI: 00007faff4fee0a0 RDI: 0000000000000004
[  296.500828][ T9188] RBP: 00007faff4fee090 R08: 0000000000000000 R09: 0000000000000000
[  296.500837][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.500845][ T9188] R13: 00007faff7016038 R14: 00007faff7015fa0 R15: 00007ffdb4a0aa38
[  296.500865][ T9188]  </TASK>
[  296.984737][ T9177] chnl_net:caif_netlink_parms(): no params data found
[  297.579003][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.593543][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.601312][ T9177] bridge_slave_0: entered allmulticast mode
[  297.620597][ T5826] Bluetooth: hci8: command tx timeout
[  297.677983][ T9177] bridge_slave_0: entered promiscuous mode
[  297.728710][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.738124][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.747058][ T9177] bridge_slave_1: entered allmulticast mode
[  297.758832][ T9177] bridge_slave_1: entered promiscuous mode
[  297.978526][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.014391][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.186909][ T9177] team0: Port device team_slave_0 added
[  298.220968][ T9177] team0: Port device team_slave_1 added
[  298.516413][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.545259][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.609964][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.659554][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.705803][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.777958][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.171930][ T9177] hsr_slave_0: entered promiscuous mode
[  299.193695][ T9177] hsr_slave_1: entered promiscuous mode
[  299.215772][ T9177] debugfs: 'hsr0' already exists in 'hsr'
[  299.239753][ T9177] Cannot create hsr debugfs directory
[  299.266156][ T9212] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  299.334793][ T9208] zswap: compressor  not available
[  299.710313][ T5826] Bluetooth: hci8: command tx timeout
[  300.193436][ T9177] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  300.244090][ T9177] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  300.305045][ T9177] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  300.358691][ T9177] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  300.737084][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.811091][ T9177] 8021q: adding VLAN 0 to HW filter on device team0
[  300.832303][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.839526][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.909852][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.917082][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.780380][ T5830] Bluetooth: hci8: command tx timeout
[  301.801260][ T5830] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  301.813109][ T5830] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  301.821195][ T5830] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  301.829180][ T5830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  301.837341][ T5830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  301.944353][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.797667][ T9245] chnl_net:caif_netlink_parms(): no params data found
[  303.002516][ T9177] veth0_vlan: entered promiscuous mode
[  303.109971][ T9177] veth1_vlan: entered promiscuous mode
[  303.331893][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.339118][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.421402][ T9245] bridge_slave_0: entered allmulticast mode
[  303.504480][ T9245] bridge_slave_0: entered promiscuous mode
[  303.538791][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.630853][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.638266][ T9245] bridge_slave_1: entered allmulticast mode
[  303.652017][ T9245] bridge_slave_1: entered promiscuous mode
[  303.679542][ T9264] netlink: 186 bytes leftover after parsing attributes in process `syz.8.631'.
[  303.849245][ T9177] veth0_macvtap: entered promiscuous mode
[  303.860373][ T5830] Bluetooth: hci10: command tx timeout
[  303.860394][ T5826] Bluetooth: hci8: command tx timeout
[  303.961926][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.012140][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.395456][ T9177] veth1_macvtap: entered promiscuous mode
[  304.510478][ T9245] team0: Port device team_slave_0 added
[  304.522949][ T9245] team0: Port device team_slave_1 added
[  304.929709][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.955143][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.070353][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.232376][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.245770][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.290297][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.482628][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.548729][ T9245] hsr_slave_0: entered promiscuous mode
[  305.569034][ T9245] hsr_slave_1: entered promiscuous mode
[  305.580810][ T9245] debugfs: 'hsr0' already exists in 'hsr'
[  305.586591][ T9245] Cannot create hsr debugfs directory
[  305.673645][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.824696][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.849828][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.942350][ T5830] Bluetooth: hci10: command tx timeout
[  305.968938][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.022276][   T86] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.435993][ T9268] writes to the poll attribute are ignored.
[  306.454671][ T9268] please use driver specific parameters instead.
[  306.505039][ T9245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.666748][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.710349][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.020489][ T9245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.131765][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.171636][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.674639][ T9245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.028912][ T5830] Bluetooth: hci10: command tx timeout
[  308.115590][ T9245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.904695][ T9245] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  308.999570][ T9245] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  309.080360][ T9245] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  309.112095][ T9245] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  310.102050][ T5830] Bluetooth: hci10: command tx timeout
[  310.110086][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.207208][ T9245] 8021q: adding VLAN 0 to HW filter on device team0
[  310.366038][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.373180][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.447076][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.454266][ T8906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.345459][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.537706][ T9245] veth0_vlan: entered promiscuous mode
[  311.602324][ T9245] veth1_vlan: entered promiscuous mode
[  312.060572][ T9245] veth0_macvtap: entered promiscuous mode
[  312.134437][ T9245] veth1_macvtap: entered promiscuous mode
[  312.271943][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.407361][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.485877][  T338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.520533][  T338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.529317][  T338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.614030][  T338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.916958][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.945597][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.988344][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.021223][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.444212][ T9332] random: crng reseeded on system resumption
[  313.532430][ T9332] hub 1-0:1.0: USB hub found
[  313.557042][ T9332] hub 1-0:1.0: 1 port detected
[  314.171086][ T9334] futex_wake_op: syz.8.641 tries to shift op by -2048; fix this program
[  314.188252][ T9341] ima: policy update failed
[  314.213196][   T30] audit: type=1802 audit(1775239750.126:4): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.642" res=0 errno=0
[  316.330724][ T5826] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  316.353345][ T5826] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  316.371740][ T5826] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  316.390241][ T5826] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  316.404252][ T5826] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  317.230632][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.237119][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.283014][ T9362] chnl_net:caif_netlink_parms(): no params data found
[  317.776274][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.831418][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.856918][ T9362] bridge_slave_0: entered allmulticast mode
[  317.881313][ T9362] bridge_slave_0: entered promiscuous mode
[  317.918091][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.984056][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.012950][ T9362] bridge_slave_1: entered allmulticast mode
[  318.149395][ T9362] bridge_slave_1: entered promiscuous mode
[  318.248586][ T9362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.319294][ T9362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.437907][ T9362] team0: Port device team_slave_0 added
[  318.463526][ T9362] team0: Port device team_slave_1 added
[  318.501212][ T5830] Bluetooth: hci11: command tx timeout
[  318.571242][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.578231][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.663052][ T9362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.725142][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.733642][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.821999][ T9362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.983799][ T9362] hsr_slave_0: entered promiscuous mode
[  319.000982][ T9362] hsr_slave_1: entered promiscuous mode
[  319.021547][ T9362] debugfs: 'hsr0' already exists in 'hsr'
[  319.057659][ T9362] Cannot create hsr debugfs directory
[  320.580313][ T5830] Bluetooth: hci11: command tx timeout
[  320.715907][ T9362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.124634][ T9362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.828520][ T9362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.036800][ T9362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.675639][ T5826] Bluetooth: hci11: command tx timeout
[  324.295575][ T9362] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  324.325957][ T9362] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  324.420433][ T5822] Bluetooth: hci4: command 0x0406 tx timeout
[  324.501909][ T9362] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  324.682389][ T9362] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  324.741140][ T5830] Bluetooth: hci11: command tx timeout
[  325.364255][ T9362] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.524832][ T9362] 8021q: adding VLAN 0 to HW filter on device team0
[  325.627705][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.634964][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.746080][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.753332][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.940855][ T5826] Bluetooth: hci12: Opcode 0x0c03 failed: -110
[  326.773734][ T9362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.958313][ T9362] veth0_vlan: entered promiscuous mode
[  326.984375][ T9362] veth1_vlan: entered promiscuous mode
[  327.068730][ T9362] veth0_macvtap: entered promiscuous mode
[  327.116672][ T9362] veth1_macvtap: entered promiscuous mode
[  327.353608][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.397618][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.749991][   T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.061022][   T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.090802][   T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.457268][   T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.059949][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.120221][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.286615][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.294582][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.930590][ T5822] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  329.941518][ T5822] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  329.949837][ T5822] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  329.959777][ T5822] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  329.971615][ T5822] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  330.340801][ T5826] Bluetooth: hci12: Opcode 0x0c03 failed: -110
[  331.290872][ T9459] chnl_net:caif_netlink_parms(): no params data found
[  331.876056][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.910616][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.980573][ T9459] bridge_slave_0: entered allmulticast mode
[  332.003320][ T9459] bridge_slave_0: entered promiscuous mode
[  332.033106][ T5826] Bluetooth: hci13: command tx timeout
[  332.072330][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.102236][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.134596][ T9459] bridge_slave_1: entered allmulticast mode
[  332.151516][ T9459] bridge_slave_1: entered promiscuous mode
[  332.673816][ T9459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.738529][ T9459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.874135][ T9459] team0: Port device team_slave_0 added
[  332.945444][ T9459] team0: Port device team_slave_1 added
[  333.185502][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.233395][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.280288][ T9459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.303240][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.365904][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.479885][ T9459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.101021][ T5822] Bluetooth: hci13: command tx timeout
[  334.374417][ T9459] hsr_slave_0: entered promiscuous mode
[  334.421665][ T9459] hsr_slave_1: entered promiscuous mode
[  334.428185][ T9459] debugfs: 'hsr0' already exists in 'hsr'
[  334.491097][ T9459] Cannot create hsr debugfs directory
[  334.670352][ T5822] Bluetooth: hci5: command 0x0406 tx timeout
[  335.637423][ T9459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.090789][ T9459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.180716][ T5826] Bluetooth: hci13: command tx timeout
[  336.276169][ T9459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.361444][ T9459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.765038][ T9459] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.822253][ T9459] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.915156][ T9459] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  337.029461][ T9459] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  337.086786][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.672'.
[  337.107006][ T9503] HfR: entered promiscuous mode
[  337.649633][ T9517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  337.843015][ T9459] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.956012][ T9459] 8021q: adding VLAN 0 to HW filter on device team0
[  338.016183][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.023321][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.089069][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.096234][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.262492][ T5826] Bluetooth: hci13: command tx timeout
[  339.261115][ T9535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  339.320895][ T9528] random: crng reseeded on system resumption
[  339.363085][ T9528] hub 1-0:1.0: USB hub found
[  339.368142][ T9528] hub 1-0:1.0: 1 port detected
[  339.563729][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.079195][ T9459] veth0_vlan: entered promiscuous mode
[  340.136230][ T9459] veth1_vlan: entered promiscuous mode
[  340.275113][ T9459] veth0_macvtap: entered promiscuous mode
[  340.333868][ T9459] veth1_macvtap: entered promiscuous mode
[  341.075613][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.522257][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.851483][ T1076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.943262][ T1076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.977885][ T1076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.211020][ T1076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.629389][  T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.664413][  T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.762301][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.774024][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.221348][ T5826] Bluetooth: hci12: Opcode 0x0c03 failed: -110
[  343.763055][ T9561] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(16.0.4096), cmd(3)
[  344.127939][ T9575] random: crng reseeded on system resumption
[  344.185812][ T9577] hub 1-0:1.0: USB hub found
[  344.251669][ T9577] hub 1-0:1.0: 1 port detected
[  346.559841][ T9613] random: crng reseeded on system resumption
[  346.718104][ T9613] hub 1-0:1.0: USB hub found
[  346.731238][ T9613] hub 1-0:1.0: 1 port detected
[  347.382150][ T9617] random: crng reseeded on system resumption
[  347.533116][ T9617] hub 1-0:1.0: USB hub found
[  347.557687][ T9617] hub 1-0:1.0: 1 port detected
[  348.139952][ T9638] FAULT_INJECTION: forcing a failure.
[  348.139952][ T9638] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  348.153956][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.2.697 Not tainted syzkaller #0 PREEMPT(full) 
[  348.153979][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.153992][ T9638] Call Trace:
[  348.153998][ T9638]  <TASK>
[  348.154004][ T9638]  dump_stack_lvl+0x100/0x190
[  348.154032][ T9638]  should_fail_ex.cold+0x5/0xa
[  348.154048][ T9638]  ? prepare_alloc_pages+0x16d/0x5f0
[  348.154068][ T9638]  should_fail_alloc_page+0xeb/0x140
[  348.154087][ T9638]  prepare_alloc_pages+0x1f0/0x5f0
[  348.154109][ T9638]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  348.154133][ T9638]  ? rcu_is_watching+0x12/0xc0
[  348.154156][ T9638]  ? trace_mm_page_alloc+0x17a/0x1d0
[  348.154174][ T9638]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  348.154196][ T9638]  ? __lock_acquire+0x4a5/0x2630
[  348.154216][ T9638]  ? tomoyo_path_number_perm+0x46d/0x580
[  348.154234][ T9638]  ? kasan_save_stack+0x3f/0x50
[  348.154246][ T9638]  ? kasan_save_stack+0x30/0x50
[  348.154259][ T9638]  ? kasan_save_track+0x14/0x30
[  348.154272][ T9638]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  348.154296][ T9638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.154314][ T9638]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  348.154338][ T9638]  ? __lock_acquire+0x4a5/0x2630
[  348.154361][ T9638]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  348.154378][ T9638]  ? policy_nodemask+0xed/0x4f0
[  348.154395][ T9638]  alloc_pages_mpol+0x1fb/0x550
[  348.154412][ T9638]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  348.154430][ T9638]  ? lruvec_stat_mod_folio+0x239/0x390
[  348.154454][ T9638]  ? vhost_dev_set_owner+0x3b2/0xa30
[  348.154468][ T9638]  ___kmalloc_large_node+0x104/0x150
[  348.154488][ T9638]  __kmalloc_large_node_noprof+0x1c/0x70
[  348.154507][ T9638]  __kmalloc_noprof+0x5be/0x850
[  348.154534][ T9638]  vhost_dev_set_owner+0x3b2/0xa30
[  348.154555][ T9638]  vhost_net_ioctl+0xfa3/0x1910
[  348.154569][ T9638]  ? do_vfs_ioctl+0x226/0x13e0
[  348.154591][ T9638]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  348.154612][ T9638]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  348.154632][ T9638]  ? hook_file_ioctl_common+0x146/0x410
[  348.154658][ T9638]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  348.154674][ T9638]  __x64_sys_ioctl+0x18e/0x210
[  348.154697][ T9638]  do_syscall_64+0x106/0xf80
[  348.154711][ T9638]  ? clear_bhb_loop+0x40/0x90
[  348.154729][ T9638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.154744][ T9638] RIP: 0033:0x7fea2d79c819
[  348.154758][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.154772][ T9638] RSP: 002b:00007fea2e5f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.154791][ T9638] RAX: ffffffffffffffda RBX: 00007fea2da16090 RCX: 00007fea2d79c819
[  348.154801][ T9638] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000002
[  348.154809][ T9638] RBP: 00007fea2d832c91 R08: 0000000000000000 R09: 0000000000000000
[  348.154818][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.154827][ T9638] R13: 00007fea2da16128 R14: 00007fea2da16090 R15: 00007ffd77062cb8
[  348.154854][ T9638]  </TASK>
[  349.848084][ T9658] netlink: 342 bytes leftover after parsing attributes in process `syz.2.701'.
[  350.020502][ T5822] Bluetooth: hci6: command 0x0406 tx timeout
[  350.470322][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  351.719365][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'.
[  351.811855][ T9690] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[  351.818969][ T9690] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  354.219955][ T9715] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.712: bg 1: bad block bitmap checksum
[  354.321907][ T9715] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6685: Filesystem failed CRC
[  354.874756][ T9733] random: crng reseeded on system resumption
[  355.105805][ T9728] hub 1-0:1.0: USB hub found
[  355.134621][ T9728] hub 1-0:1.0: 1 port detected
[  355.771186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!!
[  357.731694][ T9776] netlink: Invalid conntrack helper
[  360.107866][   T31] INFO: task syz.0.396:7952 blocked for more than 144 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  360.152153][   T31]       Not tainted syzkaller #0
[  360.157141][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  360.275199][   T31] task:syz.0.396       state:D stack:27464 pid:7952  tgid:7951  ppid:5821   task_flags:0x400140 flags:0x00080002
[  360.316354][   T31] Call Trace:
[  360.319691][   T31]  <TASK>
[  360.363706][   T31]  __schedule+0xfee/0x6120
[  360.368205][   T31]  ? __lock_acquire+0x4a5/0x2630
[  360.386234][   T31]  ? __pfx___schedule+0x10/0x10
[  360.391236][   T31]  ? find_held_lock+0x2b/0x80
[  360.396079][   T31]  ? schedule+0x2bf/0x390
[  360.406240][   T31]  schedule+0xdd/0x390
[  360.412603][   T31]  schedule_preempt_disabled+0x13/0x30
[  360.430276][   T31]  __mutex_lock+0xc9a/0x1b90
[  360.434934][   T31]  ? nfsd_nl_version_set_doit+0xc4/0x7a0
[  360.460467][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  360.478034][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  360.500736][   T31]  ? nfsd_nl_version_set_doit+0xc4/0x7a0
[  360.507717][   T31]  nfsd_nl_version_set_doit+0xc4/0x7a0
[  360.554393][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  360.564320][ T9820] random: crng reseeded on system resumption
[  360.574877][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  360.600728][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  360.629036][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  360.690258][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  360.702765][ T9820] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  360.720366][   T31]  ? genl_get_cmd+0x3ef/0x720
[  360.725116][   T31]  ? bpf_lsm_capable+0x9/0x10
[  360.729827][   T31]  ? security_capable+0x80/0x260
[  360.760301][   T31]  genl_rcv_msg+0x560/0x800
[  360.764879][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.769946][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  360.814756][ T9824] hub 1-0:1.0: USB hub found
[  360.819757][   T31]  netlink_rcv_skb+0x159/0x420
[  360.826360][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.832163][ T9824] hub 1-0:1.0: 1 port detected
[  360.840503][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  360.845861][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  360.854745][   T31]  genl_rcv+0x28/0x40
[  360.858785][   T31]  netlink_unicast+0x5aa/0x870
[  360.866443][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  360.883030][ T9820] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  360.893867][ T9820] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  360.931987][   T31]  ? __pfx___might_resched+0x10/0x10
[  360.950525][   T31]  ? __lock_acquire+0x4a5/0x2630
[  360.955547][   T31]  netlink_sendmsg+0x8b0/0xda0
[  360.986172][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.000292][ T9820] PM: hibernation: Basic memory bitmaps created
[  361.026079][   T31]  ? __import_iovec+0x1d2/0x640
[  361.042531][ T9819] PM: hibernation: Basic memory bitmaps freed
[  361.067679][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  361.083625][   T31]  ____sys_sendmsg+0x9e1/0xb70
[  361.088440][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.135445][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.170241][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  361.175620][   T31]  ___sys_sendmsg+0x190/0x1e0
[  361.190335][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.195652][   T31]  __sys_sendmsg+0x170/0x220
[  361.203343][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  361.208534][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[  361.213574][   T31]  do_syscall_64+0x106/0xf80
[  361.218198][   T31]  ? clear_bhb_loop+0x40/0x90
[  361.225484][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.250245][   T31] RIP: 0033:0x7f4a6519c819
[  361.254716][   T31] RSP: 002b:00007f4a660cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.302392][   T31] RAX: ffffffffffffffda RBX: 00007f4a65415fa0 RCX: 00007f4a6519c819
[  361.340240][   T31] RDX: 0000000000000844 RSI: 00002000000004c0 RDI: 0000000000000003
[  361.348273][   T31] RBP: 00007f4a65232c91 R08: 0000000000000000 R09: 0000000000000000
[  361.372753][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.391487][   T31] R13: 00007f4a65416038 R14: 00007f4a65415fa0 R15: 00007fff2bd66a58
[  361.399542][   T31]  </TASK>
[  361.410430][   T31] INFO: task syz.1.423:8123 blocked for more than 145 seconds.
[  361.418075][   T31]       Not tainted syzkaller #0
[  361.434002][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  361.450565][   T31] task:syz.1.423       state:D stack:27464 pid:8123  tgid:8122  ppid:5831   task_flags:0x400140 flags:0x00080002
[  361.480868][   T31] Call Trace:
[  361.487332][   T31]  <TASK>
[  361.508630][   T31]  __schedule+0xfee/0x6120
[  361.530448][   T31]  ? __lock_acquire+0x4a5/0x2630
[  361.535487][   T31]  ? __pfx___schedule+0x10/0x10
[  361.567679][   T31]  ? find_held_lock+0x2b/0x80
[  361.595473][   T31]  ? schedule+0x2bf/0x390
[  361.599893][   T31]  schedule+0xdd/0x390
[  361.606035][   T31]  schedule_preempt_disabled+0x13/0x30
[  361.613847][   T31]  __mutex_lock+0xc9a/0x1b90
[  361.618485][   T31]  ? kasan_save_track+0x14/0x30
[  361.624646][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  361.633544][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[  361.639414][   T31]  ? netlink_rcv_skb+0x159/0x420
[  361.645380][   T31]  ? genl_rcv+0x28/0x40
[  361.649601][   T31]  ? ____sys_sendmsg+0x9e1/0xb70
[  361.655198][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  361.660582][   T31]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  361.666510][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[  361.672509][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[  361.678376][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1a80
[  361.684555][   T31]  ? rcu_is_watching+0x12/0xc0
[  361.689388][   T31]  ? trace_kmalloc+0x101/0x130
[  361.700732][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  361.706954][   T31]  ? __nla_parse+0x40/0x60
[  361.730561][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  361.750241][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  361.757265][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  361.782811][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  361.790069][   T31]  ? genl_get_cmd+0x3ef/0x720
[  361.801621][   T31]  ? bpf_lsm_capable+0x9/0x10
[  361.807124][   T31]  ? security_capable+0x80/0x260
[  361.830288][   T31]  genl_rcv_msg+0x560/0x800
[  361.834871][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  361.850596][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  361.856837][   T31]  netlink_rcv_skb+0x159/0x420
[  361.880318][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  361.885415][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.900603][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  361.905976][   T31]  genl_rcv+0x28/0x40
[  361.909995][   T31]  netlink_unicast+0x5aa/0x870
[  361.931139][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  361.936548][   T31]  netlink_sendmsg+0x8b0/0xda0
[  361.950323][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.955676][   T31]  ? __import_iovec+0x1d2/0x640
[  361.980254][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  361.986045][   T31]  ____sys_sendmsg+0x9e1/0xb70
[  362.000245][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.005599][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.020802][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  362.026594][   T31]  ___sys_sendmsg+0x190/0x1e0
[  362.040266][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.051389][   T31]  __sys_sendmsg+0x170/0x220
[  362.057010][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.075579][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[  362.092521][   T31]  do_syscall_64+0x106/0xf80
[  362.097212][   T31]  ? clear_bhb_loop+0x40/0x90
[  362.110619][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.118336][   T31] RIP: 0033:0x7f09fa79c819
[  362.140246][   T31] RSP: 002b:00007f09fb629028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.160237][   T31] RAX: ffffffffffffffda RBX: 00007f09faa15fa0 RCX: 00007f09fa79c819
[  362.168265][   T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003
[  362.190834][   T31] RBP: 00007f09fa832c91 R08: 0000000000000000 R09: 0000000000000000
[  362.198895][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.230287][   T31] R13: 00007f09faa16038 R14: 00007f09faa15fa0 R15: 00007ffea6b00718
[  362.238348][   T31]  </TASK>
[  362.250415][   T31] 
[  362.250415][   T31] Showing all locks held in the system:
[  362.258196][   T31] 1 lock held by pool_workqueue_/3:
[  362.380557][   T31]  #0: ffff8880b843b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  362.403516][   T31] 1 lock held by khungtaskd/31:
[  362.408418][   T31]  #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  362.458073][   T31] 7 locks held by kworker/u8:7/1076:
[  362.490315][   T31] 2 locks held by getty/5584:
[  362.495042][   T31]  #0: ffff8880375bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  362.546493][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  362.600448][   T31] 2 locks held by syz-executor/5827:
[  362.605780][   T31]  #0: ffff888037f8e0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  362.673474][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  362.714654][   T31] 3 locks held by kworker/1:4/5870:
[  362.719898][   T31] 2 locks held by kworker/1:5/5884:
[  362.770284][   T31]  #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  362.822405][   T31]  #1: ffffc90004507d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  362.869350][   T31] 2 locks held by syz.2.351/7774:
[  362.891342][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  362.899711][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[  362.946630][   T31] 2 locks held by syz.0.396/7952:
[  362.961480][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  362.997013][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0
[  363.043947][   T31] 2 locks held by syz-executor/8004:
[  363.049293][   T31]  #0: ffff88805bac60e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  363.084167][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  363.101876][   T31] 2 locks held by syz.1.423/8123:
[  363.106977][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.116743][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  363.127076][   T31] 2 locks held by syz.6.501/8603:
[  363.136654][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.152629][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[  363.163012][   T31] 2 locks held by syz.5.504/8625:
[  363.173805][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.184684][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[  363.196863][   T31] 3 locks held by kworker/u8:10/8906:
[  363.205398][   T31]  #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  363.216900][   T31]  #1: ffffc90003ae7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  363.229202][   T31]  #2: ffffffff905fe010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  363.238785][   T31] 2 locks held by syz.7.577/8988:
[  363.245288][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.257366][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  363.268053][   T31] 3 locks held by syz-executor/9245:
[  363.276467][   T31]  #0: ffff8880504c0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  363.289724][   T31]  #1: ffff8880504c00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[  363.300046][   T31]  #2: ffffffff908afb48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[  363.332421][   T31] 2 locks held by syz.8.643/9345:
[  363.337532][   T31]  #0: ffffffff906c2bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.353054][   T31]  #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[  363.363313][   T31] 5 locks held by syz-executor/9459:
[  363.369387][   T31]  #0: ffff888081d5cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  363.383508][   T31]  #1: ffff888081d5c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[  363.393383][   T31]  #2: ffffffff908afb48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[  363.404035][   T31]  #3: ffff88807efd6300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710
[  363.413566][   T31]  #4: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  363.423742][   T31] 1 lock held by syz.1.719/9754:
[  363.428728][   T31]  #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  363.439371][   T31] 3 locks held by syz.0.732/9816:
[  363.447698][   T31]  #0: ffff8880372c4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  363.465101][   T31]  #1: ffff8880372c40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[  363.478943][   T31]  #2: ffffffff908afb48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[  363.490453][   T31] 3 locks held by syz.9.733/9819:
[  363.495556][   T31]  #0: ffff88804f798ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  363.505347][   T31]  #1: ffff88804f7980c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[  363.517058][   T31]  #2: ffffffff908afb48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[  363.527326][   T31] 
[  363.530042][   T31] =============================================
[  363.530042][   T31] 
[  363.598853][   T31] NMI backtrace for cpu 0
[  363.598874][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  363.598906][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.598921][   T31] Call Trace:
[  363.598928][   T31]  <TASK>
[  363.598936][   T31]  dump_stack_lvl+0x100/0x190
[  363.598977][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  363.599018][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  363.599055][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  363.599092][   T31]  sys_info+0x141/0x190
[  363.599122][   T31]  watchdog+0xd25/0x1050
[  363.599157][   T31]  ? __pfx_watchdog+0x10/0x10
[  363.599186][   T31]  ? __kthread_parkme+0x18c/0x230
[  363.599217][   T31]  ? kthread+0x13a/0x450
[  363.599249][   T31]  ? __pfx_watchdog+0x10/0x10
[  363.599273][   T31]  kthread+0x370/0x450
[  363.599308][   T31]  ? __pfx_kthread+0x10/0x10
[  363.599353][   T31]  ret_from_fork+0x754/0xd80
[  363.599394][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  363.599442][   T31]  ? __switch_to+0x7b4/0x1120
[  363.599472][   T31]  ? __pfx_kthread+0x10/0x10
[  363.599509][   T31]  ret_from_fork_asm+0x1a/0x30
[  363.599555][   T31]  </TASK>
[  363.599565][   T31] Sending NMI from CPU 0 to CPUs 1:
[  363.684614][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  363.686656][    C1] NMI backtrace for cpu 1
[  363.686676][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  363.686706][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.686720][    C1] RIP: 0010:sprintf+0x0/0x100
[  363.686765][    C1] Code: c4 b0 00 00 00 5b 41 5c 41 5d 41 5e 5d e9 08 e2 05 00 e8 e3 ae 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55 49 89
[  363.686789][    C1] RSP: 0018:ffffc90000197638 EFLAGS: 00000006
[  363.686808][    C1] RAX: 126e978d508cfb4c RBX: ffffc90000197760 RCX: 000000000009250c
[  363.686825][    C1] RDX: 000000000000016b RSI: ffffffff8bb063a0 RDI: ffffc90000197760
[  363.686842][    C1] RBP: ffffc90000197890 R08: 0000000000000001 R09: 0000000000000000
[  363.686857][    C1] R10: 0000000000000001 R11: 0000000000016b48 R12: 1ffff92000032eca
[  363.686873][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc90000197760
[  363.686889][    C1] FS:  0000000000000000(0000) GS:ffff888124441000(0000) knlGS:0000000000000000
[  363.686911][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.686928][    C1] CR2: 0000001b2ddecff8 CR3: 000000007b0b0000 CR4: 00000000003526f0
[  363.686944][    C1] Call Trace:
[  363.686952][    C1]  <TASK>
[  363.686960][    C1]  info_print_prefix+0x25a/0x350
[  363.686995][    C1]  ? __pfx_info_print_prefix+0x10/0x10
[  363.687027][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  363.687062][    C1]  record_print_text+0x143/0x3c0
[  363.687145][    C1]  ? desc_read_finalized_seq+0x131/0x1d0
[  363.687178][    C1]  ? __pfx_record_print_text+0x10/0x10
[  363.687213][    C1]  ? __pfx_prb_read_valid+0x10/0x10
[  363.687249][    C1]  printk_get_next_message+0x2d1/0x6c0
[  363.687290][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  363.687338][    C1]  ? lock_acquire+0x1cf/0x380
[  363.687375][    C1]  console_flush_one_record+0x67c/0xe50
[  363.687418][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[  363.687462][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  363.687492][    C1]  console_unlock+0x103/0x260
[  363.687514][    C1]  ? __pfx_console_unlock+0x10/0x10
[  363.687537][    C1]  ? lock_acquire+0x140/0x380
[  363.687568][    C1]  ? vprintk_emit+0x516/0x6b0
[  363.687590][    C1]  ? vprintk_emit+0x516/0x6b0
[  363.687616][    C1]  vprintk_emit+0x407/0x6b0
[  363.687639][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  363.687668][    C1]  _printk+0xcf/0x110
[  363.687691][    C1]  ? __pfx__printk+0x10/0x10
[  363.687714][    C1]  ? __schedule+0x1000/0x6120
[  363.687749][    C1]  ? tick_nohz_next_event+0x228/0x400
[  363.687788][    C1]  ? can_stop_idle_tick+0x17f/0x200
[  363.687814][    C1]  can_stop_idle_tick.cold+0x13/0x1f
[  363.687854][    C1]  tick_nohz_idle_stop_tick+0x799/0xed0
[  363.687884][    C1]  ? check_tsc_unstable+0x9/0x20
[  363.687915][    C1]  ? __pfx_tick_nohz_idle_stop_tick+0x10/0x10
[  363.687944][    C1]  ? __pfx_tsc_verify_tsc_adjust+0x10/0x10
[  363.687981][    C1]  ? do_idle+0x138/0x590
[  363.688006][    C1]  do_idle+0x45f/0x590
[  363.688029][    C1]  ? __pfx_do_idle+0x10/0x10
[  363.688057][    C1]  cpu_startup_entry+0x4f/0x60
[  363.688082][    C1]  start_secondary+0x21d/0x2d0
[  363.688119][    C1]  ? __pfx_start_secondary+0x10/0x10
[  363.688155][    C1]  common_startup_64+0x13e/0x148
[  363.688189][    C1]  </TASK>
[  364.072974][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  364.079876][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  364.089008][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  364.099086][   T31] Call Trace:
[  364.102355][   T31]  <TASK>
[  364.105290][   T31]  dump_stack_lvl+0x100/0x190
[  364.109973][   T31]  vpanic+0x552/0x970
[  364.113951][   T31]  ? __pfx_vpanic+0x10/0x10
[  364.118447][   T31]  ? rcu_is_watching+0x12/0xc0
[  364.123244][   T31]  panic+0xd1/0xe0
[  364.126970][   T31]  ? __pfx_panic+0x10/0x10
[  364.131387][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  364.137537][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  364.143691][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  364.149855][   T31]  ? watchdog.cold+0x198/0x1ca
[  364.154613][   T31]  ? watchdog+0xd35/0x1050
[  364.159024][   T31]  watchdog.cold+0x1a9/0x1ca
[  364.163618][   T31]  ? __pfx_watchdog+0x10/0x10
[  364.168296][   T31]  ? __kthread_parkme+0x18c/0x230
[  364.173343][   T31]  ? kthread+0x13a/0x450
[  364.177576][   T31]  ? __pfx_watchdog+0x10/0x10
[  364.182242][   T31]  kthread+0x370/0x450
[  364.186307][   T31]  ? __pfx_kthread+0x10/0x10
[  364.190891][   T31]  ret_from_fork+0x754/0xd80
[  364.195491][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  364.200606][   T31]  ? __switch_to+0x7b4/0x1120
[  364.205277][   T31]  ? __pfx_kthread+0x10/0x10
[  364.209859][   T31]  ret_from_fork_asm+0x1a/0x30
[  364.214620][   T31]  </TASK>
[  364.218102][   T31] Kernel Offset: disabled
[  364.222434][   T31] Rebooting in 86400 seconds..